./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product21.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version e04fb08f Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2bb19a23-a9ae-4bc2-b723-82e0bcb3a9f9/bin/uautomizer-tPACEb0tL8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2bb19a23-a9ae-4bc2-b723-82e0bcb3a9f9/bin/uautomizer-tPACEb0tL8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2bb19a23-a9ae-4bc2-b723-82e0bcb3a9f9/bin/uautomizer-tPACEb0tL8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2bb19a23-a9ae-4bc2-b723-82e0bcb3a9f9/bin/uautomizer-tPACEb0tL8/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product21.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2bb19a23-a9ae-4bc2-b723-82e0bcb3a9f9/bin/uautomizer-tPACEb0tL8/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2bb19a23-a9ae-4bc2-b723-82e0bcb3a9f9/bin/uautomizer-tPACEb0tL8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 5c2801af81eeb5fcd439b1a1907444cd22ba07dc03ae6cb195ad73614e32dad5 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-e04fb08 [2022-11-16 12:40:24,253 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-16 12:40:24,256 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-16 12:40:24,304 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-16 12:40:24,305 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-16 12:40:24,306 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-16 12:40:24,307 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-16 12:40:24,309 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-16 12:40:24,311 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-16 12:40:24,312 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-16 12:40:24,313 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-16 12:40:24,319 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-16 12:40:24,320 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-16 12:40:24,325 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-16 12:40:24,328 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-16 12:40:24,330 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-16 12:40:24,332 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-16 12:40:24,334 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-16 12:40:24,338 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-16 12:40:24,346 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-16 12:40:24,348 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-16 12:40:24,351 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-16 12:40:24,355 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-16 12:40:24,356 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-16 12:40:24,361 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-16 12:40:24,362 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-16 12:40:24,362 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-16 12:40:24,363 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-16 12:40:24,363 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-16 12:40:24,364 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-16 12:40:24,365 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-16 12:40:24,365 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-16 12:40:24,366 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-16 12:40:24,367 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-16 12:40:24,368 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-16 12:40:24,368 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-16 12:40:24,369 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-16 12:40:24,369 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-16 12:40:24,369 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-16 12:40:24,374 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-16 12:40:24,376 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-16 12:40:24,377 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2bb19a23-a9ae-4bc2-b723-82e0bcb3a9f9/bin/uautomizer-tPACEb0tL8/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-11-16 12:40:24,423 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-16 12:40:24,423 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-16 12:40:24,424 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-16 12:40:24,424 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-16 12:40:24,425 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-16 12:40:24,426 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-16 12:40:24,426 INFO L138 SettingsManager]: * Use SBE=true [2022-11-16 12:40:24,426 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-11-16 12:40:24,426 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-11-16 12:40:24,427 INFO L138 SettingsManager]: * Use old map elimination=false [2022-11-16 12:40:24,428 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-11-16 12:40:24,428 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-11-16 12:40:24,428 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-11-16 12:40:24,429 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-16 12:40:24,429 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-16 12:40:24,429 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-16 12:40:24,429 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-16 12:40:24,429 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-16 12:40:24,430 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-16 12:40:24,430 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-11-16 12:40:24,430 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-11-16 12:40:24,430 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-11-16 12:40:24,430 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-16 12:40:24,432 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-16 12:40:24,432 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-11-16 12:40:24,433 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-16 12:40:24,433 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-11-16 12:40:24,433 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-16 12:40:24,433 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-16 12:40:24,434 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-16 12:40:24,434 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-16 12:40:24,435 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-11-16 12:40:24,435 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2bb19a23-a9ae-4bc2-b723-82e0bcb3a9f9/bin/uautomizer-tPACEb0tL8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2bb19a23-a9ae-4bc2-b723-82e0bcb3a9f9/bin/uautomizer-tPACEb0tL8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 5c2801af81eeb5fcd439b1a1907444cd22ba07dc03ae6cb195ad73614e32dad5 [2022-11-16 12:40:24,760 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-16 12:40:24,781 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-16 12:40:24,783 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-16 12:40:24,785 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-16 12:40:24,786 INFO L275 PluginConnector]: CDTParser initialized [2022-11-16 12:40:24,787 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2bb19a23-a9ae-4bc2-b723-82e0bcb3a9f9/bin/uautomizer-tPACEb0tL8/../../sv-benchmarks/c/product-lines/elevator_spec3_product21.cil.c [2022-11-16 12:40:24,874 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2bb19a23-a9ae-4bc2-b723-82e0bcb3a9f9/bin/uautomizer-tPACEb0tL8/data/7412feb8f/174440293bcc4f52bc00d2f9d885e8fe/FLAG2dd511c00 [2022-11-16 12:40:25,514 INFO L306 CDTParser]: Found 1 translation units. [2022-11-16 12:40:25,514 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2bb19a23-a9ae-4bc2-b723-82e0bcb3a9f9/sv-benchmarks/c/product-lines/elevator_spec3_product21.cil.c [2022-11-16 12:40:25,537 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2bb19a23-a9ae-4bc2-b723-82e0bcb3a9f9/bin/uautomizer-tPACEb0tL8/data/7412feb8f/174440293bcc4f52bc00d2f9d885e8fe/FLAG2dd511c00 [2022-11-16 12:40:25,698 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2bb19a23-a9ae-4bc2-b723-82e0bcb3a9f9/bin/uautomizer-tPACEb0tL8/data/7412feb8f/174440293bcc4f52bc00d2f9d885e8fe [2022-11-16 12:40:25,701 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-16 12:40:25,702 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-16 12:40:25,704 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-16 12:40:25,704 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-16 12:40:25,708 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-16 12:40:25,708 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 12:40:25" (1/1) ... [2022-11-16 12:40:25,710 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7cc25b32 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:40:25, skipping insertion in model container [2022-11-16 12:40:25,710 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 12:40:25" (1/1) ... [2022-11-16 12:40:25,718 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-16 12:40:25,813 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-16 12:40:26,272 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2bb19a23-a9ae-4bc2-b723-82e0bcb3a9f9/sv-benchmarks/c/product-lines/elevator_spec3_product21.cil.c[62420,62433] [2022-11-16 12:40:26,340 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 12:40:26,360 INFO L203 MainTranslator]: Completed pre-run [2022-11-16 12:40:26,492 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2bb19a23-a9ae-4bc2-b723-82e0bcb3a9f9/sv-benchmarks/c/product-lines/elevator_spec3_product21.cil.c[62420,62433] [2022-11-16 12:40:26,507 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 12:40:26,537 INFO L208 MainTranslator]: Completed translation [2022-11-16 12:40:26,538 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:40:26 WrapperNode [2022-11-16 12:40:26,539 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-16 12:40:26,540 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-16 12:40:26,540 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-16 12:40:26,540 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-16 12:40:26,548 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:40:26" (1/1) ... [2022-11-16 12:40:26,571 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:40:26" (1/1) ... [2022-11-16 12:40:27,079 INFO L138 Inliner]: procedures = 90, calls = 345, calls flagged for inlining = 198, calls inlined = 948, statements flattened = 33084 [2022-11-16 12:40:27,080 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-16 12:40:27,081 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-16 12:40:27,081 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-16 12:40:27,081 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-16 12:40:27,090 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:40:26" (1/1) ... [2022-11-16 12:40:27,091 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:40:26" (1/1) ... [2022-11-16 12:40:27,164 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:40:26" (1/1) ... [2022-11-16 12:40:27,164 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:40:26" (1/1) ... [2022-11-16 12:40:27,394 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:40:26" (1/1) ... [2022-11-16 12:40:27,576 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:40:26" (1/1) ... [2022-11-16 12:40:27,646 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:40:26" (1/1) ... [2022-11-16 12:40:27,694 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:40:26" (1/1) ... [2022-11-16 12:40:27,766 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-16 12:40:27,769 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-16 12:40:27,769 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-16 12:40:27,770 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-16 12:40:27,771 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:40:26" (1/1) ... [2022-11-16 12:40:27,778 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-16 12:40:27,789 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2bb19a23-a9ae-4bc2-b723-82e0bcb3a9f9/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 12:40:27,808 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2bb19a23-a9ae-4bc2-b723-82e0bcb3a9f9/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-16 12:40:27,822 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_2bb19a23-a9ae-4bc2-b723-82e0bcb3a9f9/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-11-16 12:40:27,866 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-16 12:40:27,867 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-16 12:40:27,867 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-16 12:40:27,867 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-16 12:40:28,107 INFO L235 CfgBuilder]: Building ICFG [2022-11-16 12:40:28,109 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-16 12:40:42,468 INFO L276 CfgBuilder]: Performing block encoding [2022-11-16 12:40:42,520 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-16 12:40:42,520 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-11-16 12:40:42,532 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 12:40:42 BoogieIcfgContainer [2022-11-16 12:40:42,532 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-16 12:40:42,534 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-11-16 12:40:42,534 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-11-16 12:40:42,539 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-11-16 12:40:42,540 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-16 12:40:42,540 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 16.11 12:40:25" (1/3) ... [2022-11-16 12:40:42,541 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@551023c4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 16.11 12:40:42, skipping insertion in model container [2022-11-16 12:40:42,542 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-16 12:40:42,542 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:40:26" (2/3) ... [2022-11-16 12:40:42,542 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@551023c4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 16.11 12:40:42, skipping insertion in model container [2022-11-16 12:40:42,542 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-16 12:40:42,543 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 12:40:42" (3/3) ... [2022-11-16 12:40:42,544 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product21.cil.c [2022-11-16 12:40:42,739 INFO L303 stractBuchiCegarLoop]: Interprodecural is true [2022-11-16 12:40:42,739 INFO L304 stractBuchiCegarLoop]: Hoare is false [2022-11-16 12:40:42,739 INFO L305 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-11-16 12:40:42,739 INFO L306 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-11-16 12:40:42,740 INFO L307 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-11-16 12:40:42,740 INFO L308 stractBuchiCegarLoop]: Difference is false [2022-11-16 12:40:42,740 INFO L309 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-11-16 12:40:42,740 INFO L313 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-11-16 12:40:42,769 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 8838 states, 8837 states have (on average 1.8790313454792351) internal successors, (16605), 8837 states have internal predecessors, (16605), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:40:42,949 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1783 [2022-11-16 12:40:42,949 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:40:42,950 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:40:42,973 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:40:42,974 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:40:42,974 INFO L335 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-11-16 12:40:43,002 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 8838 states, 8837 states have (on average 1.8790313454792351) internal successors, (16605), 8837 states have internal predecessors, (16605), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:40:43,126 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1783 [2022-11-16 12:40:43,126 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:40:43,127 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:40:43,147 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:40:43,148 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:40:43,166 INFO L748 eck$LassoCheckResult]: Stem: 7104#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~maximumWeight~0 := 100;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~weight~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 4291#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 7501#L3402true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2927#L3395true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1; 1513#L3410true main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1545#L395true assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1578#L368true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 8399#L2217true assume { :end_inline_initFloors } true; 8179#L670true assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1612#L454true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 2693#L479true bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3988#L2495true assume 0 == initPersonOnFloor_~floor#1; 5008#L2496true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 6314#L2603-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 8332#L2287true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 3390#L2299-2true assume { :end_inline_callOnFloor } true; 3055#L2639true assume { :end_inline_initPersonOnFloor } true; 5726#L113true assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 5998#L854true __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 5719#L906true __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 667#L2842true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 4997#L2904true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 5467#L871-5true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 2385#L892-5true __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 3048#L2908true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 2086#L2948true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 682#L1535true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 4575#L854-1true stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 7391#L871-10true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 7923#L892-10true stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 8500#L1546true timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1665#L1685true assume !(0 != timeShift_~tmp___9~2#1); 2376#L1776true assume !(1 == ~doorState~0); 2983#L1776-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 6580#L1438true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 7724#L1459true stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 5160#L1411true assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1735#L1058-2true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 4039#L1227-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 4840#L1380-2true stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 3667#L1429true timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 5337#L1784true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 6912#L1473true assume !(1 == ~currentHeading~0); 7566#L1483true assume !(0 == ~currentFloorID~0); 5572#L1483-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1326#L1489-1true assume { :end_inline_continueInDirection } true; 1711#L1793-2true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 2687#L2973true assume !(-1 == ~expectedDirection~0); 5949#L2985true assume !(1 == ~expectedDirection~0); 5712#L2986true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 7275#L1808true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 6923#L854-2true __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 1443#L906-3true __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 3490#L2842-1true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1848#L2904-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 957#L871-17true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 2305#L892-17true __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 1964#L2908-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 6227#L2948-1true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 4639#L1535-1true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 5972#L854-3true stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 3224#L871-22true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 7352#L892-22true stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 6256#L1546-1true timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 7237#L1685-2true assume !(0 != timeShift_~tmp___9~2#1); 470#L1776-3true assume !(1 == ~doorState~0); 1597#L1776-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 5942#L1438-2true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 6146#L1459-2true stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 977#L1411-2true assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 4379#L1058-8true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 7323#L1227-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 257#L1380-8true stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 5540#L1429-2true timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 8277#L1784-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 3992#L1473-3true assume !(1 == ~currentHeading~0); 6446#L1483-9true assume !(0 == ~currentFloorID~0); 5479#L1483-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4542#L1489-7true assume { :end_inline_continueInDirection } true; 3214#L1793-5true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 8394#L2973-1true assume !(-1 == ~expectedDirection~0); 120#L2985-1true assume !(1 == ~expectedDirection~0); 8080#L2986-1true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 8216#L1808-1true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 4340#L854-4true __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 726#L906-6true __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 4239#L2842-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 291#L2843-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 1263#L871-24true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 3463#L892-24true __utac_acc__Specification3_spec__1_#t~ret104#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret104#1;havoc __utac_acc__Specification3_spec__1_#t~ret104#1; 1705#L2847-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 5082#L2948-2true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 333#L1535-2true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 3725#L854-5true stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 8066#L871-34true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 6593#L892-34true stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 6999#L1546-2true timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 4828#L1685-4true assume !(0 != timeShift_~tmp___9~2#1); 3937#L1776-6true assume !(1 == ~doorState~0); 2032#L1776-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 8142#L1438-4true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 3000#L1459-4true stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 8765#L1411-4true assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 5432#L1058-14true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 8030#L1227-14true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 5207#L1380-14true stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 5227#L1429-4true timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 3548#L1784-4true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 4890#L1473-6true assume !(1 == ~currentHeading~0); 2997#L1483-18true assume !(0 == ~currentFloorID~0); 8674#L1483-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1110#L1489-13true assume { :end_inline_continueInDirection } true; 82#L1793-8true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 2577#L2973-2true assume !(-1 == ~expectedDirection~0); 4443#L2985-2true assume !(1 == ~expectedDirection~0); 5228#L2986-2true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 8226#L1808-2true assume { :end_inline_timeShift } true; 6388#L181true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 5260#L454-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 5539#L479-1true bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7325#L2495-1true assume 0 == initPersonOnFloor_~floor#1; 7137#L2496-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 4210#L2603-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 6086#L2287-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2398#L2299-5true assume { :end_inline_callOnFloor } true; 6668#L2639-1true assume { :end_inline_initPersonOnFloor } true; 2764#L113-1true assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 4435#L854-6true __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 5750#L906-9true __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 6511#L2842-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 8685#L2843-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 216#L871-36true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 818#L892-36true __utac_acc__Specification3_spec__1_#t~ret104#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret104#1;havoc __utac_acc__Specification3_spec__1_#t~ret104#1; 7297#L2847-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 5705#L2948-3true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 6853#L1535-3true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 7705#L854-7true stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 2780#L871-46true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 2159#L892-46true stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 358#L1546-3true timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1917#L1685-6true assume !(0 != timeShift_~tmp___9~2#1); 6834#L1776-9true assume !(1 == ~doorState~0); 752#L1776-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 1446#L1438-6true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 8178#L1459-6true stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 5378#L1411-6true assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1617#L1058-20true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 8593#L1227-20true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 7354#L1380-20true stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 5333#L1429-6true timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 491#L1784-6true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1029#L1473-9true assume !(1 == ~currentHeading~0); 3901#L1483-27true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 8077#L1483-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 905#L1489-19true assume { :end_inline_continueInDirection } true; 1080#L1793-11true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 5325#L2973-3true assume !(-1 == ~expectedDirection~0); 4459#L2985-3true assume !(1 == ~expectedDirection~0); 4742#L2986-3true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 7875#L1808-3true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 2080#L198-2true [2022-11-16 12:40:43,180 INFO L750 eck$LassoCheckResult]: Loop: 2080#L198-2true assume !false; 4020#L199true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 4867#L202true assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 8828#L701true cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 2788#L206true assume 1 != cleanup_~tmp___0~0#1; 6252#L206-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 7259#L2224-244true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 1360#L2251-244true anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 4660#L962true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 5409#L1026true isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 4523#L1039true cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 712#L218true assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 7024#L854-8true __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 1785#L906-12true __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 6292#L2842-4true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 7355#L2904-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 3911#L871-53true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 7857#L892-53true __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 5276#L2908-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 7604#L2948-4true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 7149#L1535-4true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 5165#L854-9true stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 8437#L871-58true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 6295#L892-58true stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 2962#L1546-4true timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 2355#L1685-8true assume !(0 != timeShift_~tmp___9~2#1); 751#L1776-12true assume 1 == ~doorState~0;~doorState~0 := 0; 1535#L1776-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 7158#L1438-8true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 6662#L1459-8true stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 4516#L1411-8true assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 3373#L1058-26true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 4274#L1227-26true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 4190#L1380-26true stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 7191#L1429-8true timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 8740#L1784-8true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 115#L1473-12true assume !(1 == ~currentHeading~0); 356#L1483-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3352#L1483-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 608#L1489-25true assume { :end_inline_continueInDirection } true; 6213#L1793-14true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 5186#L2973-4true assume !(-1 == ~expectedDirection~0); 4843#L2985-4true assume !(1 == ~expectedDirection~0); 3500#L2986-4true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 983#L1808-4true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2080#L198-2true [2022-11-16 12:40:43,185 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:40:43,186 INFO L85 PathProgramCache]: Analyzing trace with hash 739491462, now seen corresponding path program 1 times [2022-11-16 12:40:43,199 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:40:43,200 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1735769404] [2022-11-16 12:40:43,200 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:40:43,201 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:40:43,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:40:44,089 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:40:44,092 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:40:44,094 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1735769404] [2022-11-16 12:40:44,095 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1735769404] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:40:44,096 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:40:44,096 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:40:44,098 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [260690319] [2022-11-16 12:40:44,099 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:40:44,106 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:40:44,108 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:40:44,109 INFO L85 PathProgramCache]: Analyzing trace with hash -669048480, now seen corresponding path program 1 times [2022-11-16 12:40:44,109 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:40:44,111 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [905166307] [2022-11-16 12:40:44,111 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:40:44,111 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:40:44,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:40:44,391 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:40:44,392 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:40:44,392 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [905166307] [2022-11-16 12:40:44,392 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [905166307] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:40:44,393 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:40:44,393 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:40:44,393 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [740312771] [2022-11-16 12:40:44,394 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:40:44,395 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:40:44,396 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:40:44,441 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 12:40:44,442 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-16 12:40:44,476 INFO L87 Difference]: Start difference. First operand has 8838 states, 8837 states have (on average 1.8790313454792351) internal successors, (16605), 8837 states have internal predecessors, (16605), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 6.428571428571429) internal successors, (45), 7 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:40:55,124 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:40:55,124 INFO L93 Difference]: Finished difference Result 28038 states and 52223 transitions. [2022-11-16 12:40:55,125 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 28038 states and 52223 transitions. [2022-11-16 12:40:55,360 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6304 [2022-11-16 12:40:55,526 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 28038 states to 27910 states and 52078 transitions. [2022-11-16 12:40:55,528 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 27910 [2022-11-16 12:40:55,559 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 27910 [2022-11-16 12:40:55,559 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27910 states and 52078 transitions. [2022-11-16 12:40:55,609 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:40:55,609 INFO L218 hiAutomatonCegarLoop]: Abstraction has 27910 states and 52078 transitions. [2022-11-16 12:40:55,665 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27910 states and 52078 transitions. [2022-11-16 12:40:56,051 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27910 to 13945. [2022-11-16 12:40:56,093 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13945 states, 13945 states have (on average 1.8691287199713158) internal successors, (26065), 13944 states have internal predecessors, (26065), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:40:56,128 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13945 states to 13945 states and 26065 transitions. [2022-11-16 12:40:56,129 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13945 states and 26065 transitions. [2022-11-16 12:40:56,130 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2022-11-16 12:40:56,136 INFO L428 stractBuchiCegarLoop]: Abstraction has 13945 states and 26065 transitions. [2022-11-16 12:40:56,137 INFO L335 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-11-16 12:40:56,138 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13945 states and 26065 transitions. [2022-11-16 12:40:56,203 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3084 [2022-11-16 12:40:56,203 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:40:56,204 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:40:56,215 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:40:56,215 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:40:56,217 INFO L748 eck$LassoCheckResult]: Stem: 45752#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~maximumWeight~0 := 100;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~weight~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 43885#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 43886#L3402 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 42334#L3395 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1; 40138#L3410 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 40139#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 40196#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 40256#L2217 assume { :end_inline_initFloors } true; 46039#L670 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 40311#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 40312#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 42025#L2495 assume 0 == initPersonOnFloor_~floor#1; 43588#L2496 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 37330#L2603-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 45392#L2287 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 40119#L2299-2 assume { :end_inline_callOnFloor } true; 42509#L2639 assume { :end_inline_initPersonOnFloor } true; 42510#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 45032#L854 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 45029#L906 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 38499#L2842 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 38500#L2904 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 44505#L871-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 39929#L892-5 __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 41566#L2908 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 37379#L2948 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 38535#L1535 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 38536#L2224 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 43531#L2251 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 44269#L1506 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1; 40518#L1518 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 45636#L1546 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 40408#L1685 assume !(0 != timeShift_~tmp___9~2#1); 40410#L1776 assume !(1 == ~doorState~0); 41558#L1776-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 42407#L1438 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 41548#L1459 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 44643#L1411 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 40526#L1058-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~22#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~22#1;isTopFloor_~retValue_acc~22#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~22#1; 39890#L2798-2 stopRequestedInDirection__wrappee__weight_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~15#1 := stopRequestedInDirection__wrappee__weight_#t~ret32#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1; 38822#L1062-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~15#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 38037#L1380-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 37772#L1429 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 43250#L1784 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 44767#L1473 assume !(1 == ~currentHeading~0); 45663#L1483 assume !(0 == ~currentFloorID~0); 42680#L1483-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 39814#L1489-1 assume { :end_inline_continueInDirection } true; 38502#L1793-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 40484#L2973 assume !(-1 == ~expectedDirection~0); 42019#L2985 assume !(1 == ~expectedDirection~0); 44021#L2986 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 45026#L1808 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 45670#L854-2 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 40027#L906-3 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 40028#L2842-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 43043#L2904-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 50856#L2914-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 47978#L2925-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 42483#L2936-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 42485#L2947-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 38699#L2948-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 44204#L1535-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 44205#L854-3 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 45202#L871-22 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 38283#L892-22 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 45365#L1546-1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 45366#L1685-2 assume !(0 != timeShift_~tmp___9~2#1); 38073#L1776-3 assume !(1 == ~doorState~0); 38074#L1776-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 40286#L1438-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 42820#L1459-2 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 39146#L1411-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 39147#L1058-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 43957#L1227-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 37247#L1380-8 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 37574#L1429-2 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 44921#L1784-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 43590#L1473-3 assume !(1 == ~currentHeading~0); 43591#L1483-9 assume !(0 == ~currentFloorID~0); 44872#L1483-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 44113#L1489-7 assume { :end_inline_continueInDirection } true; 42705#L1793-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 42706#L2973-1 assume !(-1 == ~expectedDirection~0); 37229#L2985-1 assume !(1 == ~expectedDirection~0); 37230#L2986-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 46024#L1808-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 43923#L854-4 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 38629#L906-6 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 38630#L2842-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 39440#L2904-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 37206#L2914-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 37207#L2925-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 44749#L2936-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 43252#L2947-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 41384#L2948-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 37757#L1535-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 37759#L854-5 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 43312#L871-34 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 44231#L892-34 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 41838#L1546-2 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 44368#L1685-4 assume !(0 != timeShift_~tmp___9~2#1); 44369#L1776-6 assume !(1 == ~doorState~0); 47998#L1776-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 47995#L1438-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 47992#L1459-4 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 47991#L1411-4 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 44826#L1058-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 44827#L1227-14 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 47845#L1380-14 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 48280#L1429-4 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 48279#L1784-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 44421#L1473-6 assume !(1 == ~currentHeading~0); 44422#L1483-18 assume !(0 == ~currentFloorID~0); 42426#L1483-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 39405#L1489-13 assume { :end_inline_continueInDirection } true; 37131#L1793-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 37132#L2973-2 assume !(-1 == ~expectedDirection~0); 41848#L2985-2 assume !(1 == ~expectedDirection~0); 44024#L2986-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 44694#L1808-2 assume { :end_inline_timeShift } true; 45422#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 44717#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 41413#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 44920#L2495-1 assume 0 == initPersonOnFloor_~floor#1; 45760#L2496-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 37174#L2603-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 43808#L2287-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 41585#L2299-5 assume { :end_inline_callOnFloor } true; 41586#L2639-1 assume { :end_inline_initPersonOnFloor } true; 42124#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 42125#L854-6 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 44017#L906-9 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 45047#L2842-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 44458#L2904-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 44459#L2914-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 44907#L2925-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 44908#L2936-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 45234#L2947-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 39186#L2948-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 45021#L1535-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 45644#L854-7 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 45951#L871-46 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 42913#L892-46 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 48152#L1546-3 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 48151#L1685-6 assume !(0 != timeShift_~tmp___9~2#1); 48150#L1776-9 assume !(1 == ~doorState~0); 48149#L1776-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 48148#L1438-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 48131#L1459-6 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 48124#L1411-6 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 48123#L1058-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 48122#L1227-20 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 38367#L1380-20 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 42550#L1429-6 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 38123#L1784-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 38125#L1473-9 assume !(1 == ~currentHeading~0); 39256#L1483-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 41847#L1483-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 39003#L1489-19 assume { :end_inline_continueInDirection } true; 39004#L1793-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 39357#L2973-3 assume !(-1 == ~expectedDirection~0); 39663#L2985-3 assume !(1 == ~expectedDirection~0); 41026#L2986-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 44296#L1808-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 39158#L198-2 [2022-11-16 12:40:56,220 INFO L750 eck$LassoCheckResult]: Loop: 39158#L198-2 assume !false; 41106#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 43623#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 44396#L701 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 42158#L206 assume 1 != cleanup_~tmp___0~0#1; 42159#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 45364#L2224-244 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 38804#L2251-244 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 39878#L962 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 36919#L1026 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 44097#L1039 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 44098#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 48197#L854-8 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 48196#L906-12 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 48195#L2842-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 48194#L2904-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 48193#L2914-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 48192#L2925-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 44469#L2936-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 44470#L2947-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 45912#L2948-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 45764#L1535-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 44645#L854-9 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 44646#L871-58 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 41115#L892-58 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 39439#L1546-4 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 42382#L1685-8 assume !(0 != timeShift_~tmp___9~2#1); 47962#L1776-12 assume 1 == ~doorState~0;~doorState~0 := 0; 47961#L1776-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 47959#L1438-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 47955#L1459-8 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 44089#L1411-8 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 42896#L1058-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 42897#L1227-26 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 0;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 39445#L1380-26 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 42732#L1429-8 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 45779#L1784-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 37215#L1473-12 assume !(1 == ~currentHeading~0); 37216#L1483-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 37809#L1483-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 38381#L1489-25 assume { :end_inline_continueInDirection } true; 38382#L1793-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 44664#L2973-4 assume !(-1 == ~expectedDirection~0); 44382#L2985-4 assume !(1 == ~expectedDirection~0); 40412#L2986-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 39157#L1808-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 39158#L198-2 [2022-11-16 12:40:56,220 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:40:56,221 INFO L85 PathProgramCache]: Analyzing trace with hash 829105244, now seen corresponding path program 1 times [2022-11-16 12:40:56,221 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:40:56,221 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1273555976] [2022-11-16 12:40:56,222 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:40:56,222 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:40:56,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:40:56,488 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:40:56,489 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:40:56,491 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1273555976] [2022-11-16 12:40:56,492 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1273555976] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:40:56,492 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:40:56,493 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:40:56,494 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1729250932] [2022-11-16 12:40:56,495 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:40:56,497 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:40:56,498 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:40:56,499 INFO L85 PathProgramCache]: Analyzing trace with hash 785870835, now seen corresponding path program 1 times [2022-11-16 12:40:56,503 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:40:56,503 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1186850366] [2022-11-16 12:40:56,504 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:40:56,504 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:40:56,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:40:56,580 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:40:56,580 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:40:56,582 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1186850366] [2022-11-16 12:40:56,582 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1186850366] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:40:56,582 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:40:56,582 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 12:40:56,583 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1694512293] [2022-11-16 12:40:56,583 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:40:56,584 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:40:56,584 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:40:56,584 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 12:40:56,585 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 12:40:56,585 INFO L87 Difference]: Start difference. First operand 13945 states and 26065 transitions. cyclomatic complexity: 12121 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:40:58,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:40:58,449 INFO L93 Difference]: Finished difference Result 22108 states and 41097 transitions. [2022-11-16 12:40:58,450 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 22108 states and 41097 transitions. [2022-11-16 12:40:58,599 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5208 [2022-11-16 12:40:58,722 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 22108 states to 22108 states and 41097 transitions. [2022-11-16 12:40:58,722 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 22108 [2022-11-16 12:40:58,749 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 22108 [2022-11-16 12:40:58,750 INFO L73 IsDeterministic]: Start isDeterministic. Operand 22108 states and 41097 transitions. [2022-11-16 12:40:58,778 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:40:58,778 INFO L218 hiAutomatonCegarLoop]: Abstraction has 22108 states and 41097 transitions. [2022-11-16 12:40:58,813 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22108 states and 41097 transitions. [2022-11-16 12:40:59,193 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22108 to 13990. [2022-11-16 12:40:59,213 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13990 states, 13990 states have (on average 1.8663330950679056) internal successors, (26110), 13989 states have internal predecessors, (26110), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:40:59,249 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13990 states to 13990 states and 26110 transitions. [2022-11-16 12:40:59,250 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13990 states and 26110 transitions. [2022-11-16 12:40:59,250 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-16 12:40:59,251 INFO L428 stractBuchiCegarLoop]: Abstraction has 13990 states and 26110 transitions. [2022-11-16 12:40:59,251 INFO L335 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-11-16 12:40:59,251 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13990 states and 26110 transitions. [2022-11-16 12:40:59,315 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3094 [2022-11-16 12:40:59,315 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:40:59,315 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:40:59,321 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:40:59,321 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:40:59,326 INFO L748 eck$LassoCheckResult]: Stem: 81806#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~maximumWeight~0 := 100;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~weight~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 79953#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 79954#L3402 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 78402#L3395 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1; 76211#L3410 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 76212#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 76271#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 76331#L2217 assume { :end_inline_initFloors } true; 82099#L670 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 76386#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 76387#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 78091#L2495 assume 0 == initPersonOnFloor_~floor#1; 79660#L2496 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 73402#L2603-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 81444#L2287 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 76190#L2299-2 assume { :end_inline_callOnFloor } true; 78578#L2639 assume { :end_inline_initPersonOnFloor } true; 78579#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 81093#L854 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 81090#L906 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 74575#L2842 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 74576#L2904 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 80572#L871-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 76002#L892-5 __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 77632#L2908 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 73451#L2948 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 74611#L1535 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 74612#L2224 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 79602#L2251 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 80338#L1506 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1; 76592#L1518 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 81683#L1546 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 76485#L1685 assume !(0 != timeShift_~tmp___9~2#1); 76487#L1776 assume !(1 == ~doorState~0); 77621#L1776-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 78475#L1438 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 77611#L1459 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 80704#L1411 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 76600#L1058-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 76601#L1227-2 assume !(0 == ~currentFloorID~0); 79285#L1233-2 assume !(~currentFloorID~0 > 0); 75406#L1248-2 assume ~currentFloorID~0 > 0; 75408#L1250-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 80866#L1251-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 75995#L1380-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 82837#L1429 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 82517#L1784 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 81711#L1473 assume !(1 == ~currentHeading~0); 81712#L1483 assume !(0 == ~currentFloorID~0); 78746#L1483-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 75890#L1489-1 assume { :end_inline_continueInDirection } true; 74578#L1793-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 76560#L2973 assume !(-1 == ~expectedDirection~0); 78086#L2985 assume !(1 == ~expectedDirection~0); 80098#L2986 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 81087#L1808 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 81719#L854-2 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 76101#L906-3 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 76102#L2842-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 76796#L2904-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 75185#L871-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 75186#L892-17 __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 76994#L2908-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 74927#L2948-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 83233#L1535-1 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 83219#L2224-61 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 83195#L2251-61 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 83186#L1506-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1; 83173#L1518-1 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 83170#L1546-1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 83158#L1685-2 assume !(0 != timeShift_~tmp___9~2#1); 83154#L1776-3 assume !(1 == ~doorState~0); 83145#L1776-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 83140#L1438-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 83136#L1459-2 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 83133#L1411-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 80028#L1058-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 80029#L1227-8 assume !(0 == ~currentFloorID~0); 81700#L1233-8 assume !(~currentFloorID~0 > 0); 78727#L1248-8 assume ~currentFloorID~0 > 0; 78634#L1250-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 77617#L1251-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 73317#L1380-8 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 82686#L1429-2 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 82684#L1784-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 79662#L1473-3 assume !(1 == ~currentHeading~0); 79663#L1483-9 assume !(0 == ~currentFloorID~0); 80934#L1483-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 80186#L1489-7 assume { :end_inline_continueInDirection } true; 78771#L1793-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 78772#L2973-1 assume !(-1 == ~expectedDirection~0); 73299#L2985-1 assume !(1 == ~expectedDirection~0); 73300#L2986-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 82085#L1808-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 83234#L854-4 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 83229#L906-6 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 83227#L2842-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 83228#L2843-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 73732#L871-24 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 74025#L892-24 __utac_acc__Specification3_spec__1_#t~ret104#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret104#1;havoc __utac_acc__Specification3_spec__1_#t~ret104#1; 76552#L2847-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 73053#L2948-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 73832#L1535-2 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 73833#L2224-122 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 74500#L2251-122 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 78151#L1506-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1; 77902#L1518-2 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 77903#L1546-2 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 80440#L1685-4 assume !(0 != timeShift_~tmp___9~2#1); 79608#L1776-6 assume !(1 == ~doorState~0); 77100#L1776-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 77101#L1438-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 78498#L1459-4 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 78499#L1411-4 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 80892#L1058-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 80893#L1227-14 assume !(0 == ~currentFloorID~0); 81257#L1233-14 assume !(~currentFloorID~0 > 0); 78630#L1248-14 assume ~currentFloorID~0 > 0; 78631#L1250-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 77439#L1251-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 73867#L1380-14 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 82697#L1429-4 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 82695#L1784-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 80489#L1473-6 assume !(1 == ~currentHeading~0); 78495#L1483-18 assume !(0 == ~currentFloorID~0); 78496#L1483-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 75479#L1489-13 assume { :end_inline_continueInDirection } true; 73202#L1793-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 73203#L2973-2 assume !(-1 == ~expectedDirection~0); 77913#L2985-2 assume !(1 == ~expectedDirection~0); 80099#L2986-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 80757#L1808-2 assume { :end_inline_timeShift } true; 81472#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 80781#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 77482#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 80979#L2495-1 assume 0 == initPersonOnFloor_~floor#1; 81815#L2496-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 73245#L2603-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 79879#L2287-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 77650#L2299-5 assume { :end_inline_callOnFloor } true; 77651#L2639-1 assume { :end_inline_initPersonOnFloor } true; 81611#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 84177#L854-6 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 84176#L906-9 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 84175#L2842-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 84174#L2843-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 73546#L871-36 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 73548#L892-36 __utac_acc__Specification3_spec__1_#t~ret104#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret104#1;havoc __utac_acc__Specification3_spec__1_#t~ret104#1; 74904#L2847-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 74307#L2948-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 83121#L1535-3 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 83115#L2224-183 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 83110#L2251-183 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 83107#L1506-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1; 83106#L1518-3 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 83104#L1546-3 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 83102#L1685-6 assume !(0 != timeShift_~tmp___9~2#1); 83101#L1776-9 assume !(1 == ~doorState~0); 83100#L1776-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 83099#L1438-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 83092#L1459-6 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 83086#L1411-6 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 83081#L1058-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 82151#L1227-20 assume !(0 == ~currentFloorID~0); 81679#L1233-20 assume !(~currentFloorID~0 > 0); 75752#L1248-20 assume ~currentFloorID~0 > 0; 79535#L1250-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 75907#L1251-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 74181#L1380-20 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 82972#L1429-6 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 82678#L1784-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 75330#L1473-9 assume !(1 == ~currentHeading~0); 75332#L1483-27 assume !(0 == ~currentFloorID~0); 77912#L1483-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 75078#L1489-19 assume { :end_inline_continueInDirection } true; 75079#L1793-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 75433#L2973-3 assume !(-1 == ~expectedDirection~0); 75737#L2985-3 assume !(1 == ~expectedDirection~0); 77099#L2986-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 80365#L1808-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 75235#L198-2 [2022-11-16 12:40:59,326 INFO L750 eck$LassoCheckResult]: Loop: 75235#L198-2 assume !false; 77179#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 79691#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 80466#L701 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 78223#L206 assume 1 != cleanup_~tmp___0~0#1; 78224#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 81420#L2224-244 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 74880#L2251-244 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 75952#L962 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 72990#L1026 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 80170#L1039 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 74680#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 74681#L854-8 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 76689#L906-12 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 76690#L2842-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 81437#L2904-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 80445#L2914-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 80446#L2925-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 80535#L2936-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 75694#L2947-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 75696#L2948-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 81819#L1535-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 81820#L854-9 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 86726#L871-58 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 77188#L892-58 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 75513#L1546-4 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 77588#L1685-8 assume !(0 != timeShift_~tmp___9~2#1); 74759#L1776-12 assume 1 == ~doorState~0;~doorState~0 := 0; 74760#L1776-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 76251#L1438-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 75176#L1459-8 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 81607#L1411-8 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 82485#L1058-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 82486#L1227-26 assume !(0 == ~currentFloorID~0); 76980#L1233-26 assume !(~currentFloorID~0 > 0); 74667#L1248-26 assume ~currentFloorID~0 > 0; 74669#L1250-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 77419#L1251-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 73015#L1380-26 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 82520#L1429-8 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 82518#L1784-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 73285#L1473-12 assume !(1 == ~currentHeading~0); 73286#L1483-36 assume !(0 == ~currentFloorID~0); 73883#L1483-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 74454#L1489-25 assume { :end_inline_continueInDirection } true; 74455#L1793-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 80723#L2973-4 assume !(-1 == ~expectedDirection~0); 80452#L2985-4 assume !(1 == ~expectedDirection~0); 76489#L2986-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 75234#L1808-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 75235#L198-2 [2022-11-16 12:40:59,327 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:40:59,327 INFO L85 PathProgramCache]: Analyzing trace with hash 657308978, now seen corresponding path program 1 times [2022-11-16 12:40:59,327 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:40:59,328 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [423049289] [2022-11-16 12:40:59,328 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:40:59,328 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:40:59,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:40:59,559 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:40:59,559 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:40:59,560 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [423049289] [2022-11-16 12:40:59,560 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [423049289] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:40:59,560 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:40:59,560 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:40:59,560 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1499356191] [2022-11-16 12:40:59,561 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:40:59,561 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:40:59,562 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:40:59,562 INFO L85 PathProgramCache]: Analyzing trace with hash 753739994, now seen corresponding path program 1 times [2022-11-16 12:40:59,562 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:40:59,562 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1913607489] [2022-11-16 12:40:59,563 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:40:59,563 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:40:59,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:40:59,636 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:40:59,636 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:40:59,637 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1913607489] [2022-11-16 12:40:59,637 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1913607489] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:40:59,637 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:40:59,637 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 12:40:59,638 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1792859945] [2022-11-16 12:40:59,638 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:40:59,638 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:40:59,638 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:40:59,639 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 12:40:59,639 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 12:40:59,639 INFO L87 Difference]: Start difference. First operand 13990 states and 26110 transitions. cyclomatic complexity: 12121 Second operand has 5 states, 5 states have (on average 10.0) internal successors, (50), 5 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:41:07,362 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:41:07,362 INFO L93 Difference]: Finished difference Result 44161 states and 81487 transitions. [2022-11-16 12:41:07,362 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 44161 states and 81487 transitions. [2022-11-16 12:41:07,538 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11282 [2022-11-16 12:41:07,884 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 44161 states to 44095 states and 81415 transitions. [2022-11-16 12:41:07,884 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 44095 [2022-11-16 12:41:07,925 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 44095 [2022-11-16 12:41:07,925 INFO L73 IsDeterministic]: Start isDeterministic. Operand 44095 states and 81415 transitions. [2022-11-16 12:41:07,966 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:41:07,966 INFO L218 hiAutomatonCegarLoop]: Abstraction has 44095 states and 81415 transitions. [2022-11-16 12:41:08,007 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44095 states and 81415 transitions. [2022-11-16 12:41:08,515 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44095 to 22962. [2022-11-16 12:41:08,561 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22962 states, 22962 states have (on average 1.8441337862555527) internal successors, (42345), 22961 states have internal predecessors, (42345), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:41:08,624 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22962 states to 22962 states and 42345 transitions. [2022-11-16 12:41:08,625 INFO L240 hiAutomatonCegarLoop]: Abstraction has 22962 states and 42345 transitions. [2022-11-16 12:41:08,625 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-16 12:41:08,627 INFO L428 stractBuchiCegarLoop]: Abstraction has 22962 states and 42345 transitions. [2022-11-16 12:41:08,627 INFO L335 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-11-16 12:41:08,627 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22962 states and 42345 transitions. [2022-11-16 12:41:08,693 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5717 [2022-11-16 12:41:08,693 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:41:08,693 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:41:08,701 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:41:08,701 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:41:08,701 INFO L748 eck$LassoCheckResult]: Stem: 139979#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~maximumWeight~0 := 100;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~weight~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 138092#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 138093#L3402 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 136541#L3395 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1; 134361#L3410 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 134362#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 134421#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 134480#L2217 assume { :end_inline_initFloors } true; 140290#L670 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 134535#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 134536#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 136233#L2495 assume 0 == initPersonOnFloor_~floor#1; 137798#L2496 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 131565#L2603-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 139605#L2287 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 134341#L2299-2 assume { :end_inline_callOnFloor } true; 136716#L2639 assume { :end_inline_initPersonOnFloor } true; 136717#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 139240#L854 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 139236#L906 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 132730#L2842 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 132731#L2904 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 138700#L871-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 134152#L892-5 __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 135781#L2908 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 131613#L2948 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 132765#L1535 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 132766#L2224 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 137741#L2251 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 138468#L1506 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1; 134742#L1518 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 139861#L1546 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 134634#L1685 assume !(0 != timeShift_~tmp___9~2#1); 134636#L1776 assume !(1 == ~doorState~0); 135772#L1776-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 136614#L1438 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 135762#L1459 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 138836#L1411 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 134750#L1058-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 134751#L1227-2 assume !(0 == ~currentFloorID~0); 137425#L1233-2 assume !(~currentFloorID~0 > 0); 133557#L1248-2 assume ~currentFloorID~0 > 0; 133559#L1250-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 139009#L1251-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 134143#L1380-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 132002#L1429 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 137458#L1784 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 139887#L1473 assume !(1 == ~currentHeading~0); 139888#L1483 assume !(0 == ~currentFloorID~0); 136886#L1483-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 134041#L1489-1 assume { :end_inline_continueInDirection } true; 132733#L1793-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 141109#L2973 assume !(-1 == ~expectedDirection~0); 141106#L2985 assume !(1 == ~expectedDirection~0); 141100#L2986 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 141098#L1808 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 141097#L854-2 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 141096#L906-3 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 141094#L2842-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 141092#L2904-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 133338#L871-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 133339#L892-17 __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 135145#L2908-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 132930#L2948-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 138402#L1535-1 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 135555#L2224-61 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 135557#L2251-61 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 136323#L1506-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1; 133626#L1518-1 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 139577#L1546-1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 139578#L1685-2 assume !(0 != timeShift_~tmp___9~2#1); 132305#L1776-3 assume !(1 == ~doorState~0); 132306#L1776-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 134511#L1438-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 137029#L1459-2 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 133379#L1411-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 133380#L1058-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 138163#L1227-8 assume !(0 == ~currentFloorID~0); 139878#L1233-8 assume !(~currentFloorID~0 > 0); 136868#L1248-8 assume ~currentFloorID~0 > 0; 136773#L1250-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 135768#L1251-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 131482#L1380-8 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 151239#L1429-2 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 151238#L1784-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 137800#L1473-3 assume !(1 == ~currentHeading~0); 137801#L1483-9 assume !(0 == ~currentFloorID~0); 139079#L1483-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 138314#L1489-7 assume { :end_inline_continueInDirection } true; 137813#L1793-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 150869#L2973-1 assume !(-1 == ~expectedDirection~0); 148949#L2985-1 assume !(1 == ~expectedDirection~0); 148947#L2986-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 144579#L1808-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 144576#L854-4 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 144557#L906-6 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 144350#L2842-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 144349#L2843-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 140379#L871-24 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 132182#L892-24 __utac_acc__Specification3_spec__1_#t~ret104#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret104#1;havoc __utac_acc__Specification3_spec__1_#t~ret104#1; 137221#L2847-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 144286#L2948-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 144284#L1535-2 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 144285#L2224-122 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 144578#L2251-122 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 144568#L1506-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1; 144279#L1518-2 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 144276#L1546-2 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 144269#L1685-4 assume !(0 != timeShift_~tmp___9~2#1); 137747#L1776-6 assume !(1 == ~doorState~0); 135255#L1776-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 135256#L1438-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 136636#L1459-4 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 136637#L1411-4 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 139038#L1058-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 139039#L1227-14 assume !(0 == ~currentFloorID~0); 139407#L1233-14 assume !(~currentFloorID~0 > 0); 136767#L1248-14 assume ~currentFloorID~0 > 0; 136768#L1250-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 135590#L1251-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 132020#L1380-14 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 151130#L1429-4 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 149464#L1784-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 149465#L1473-6 assume !(1 == ~currentHeading~0); 136633#L1483-18 assume !(0 == ~currentFloorID~0); 136634#L1483-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 133630#L1489-13 assume { :end_inline_continueInDirection } true; 133631#L1793-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 151025#L2973-2 assume !(-1 == ~expectedDirection~0); 151023#L2985-2 assume !(1 == ~expectedDirection~0); 151021#L2986-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 151020#L1808-2 assume { :end_inline_timeShift } true; 148946#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 148945#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 148939#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 148936#L2495-1 assume 0 == initPersonOnFloor_~floor#1; 148929#L2496-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 148903#L2603-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 148900#L2287-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 148779#L2299-5 assume { :end_inline_callOnFloor } true; 145090#L2639-1 assume { :end_inline_initPersonOnFloor } true; 144723#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 144719#L854-6 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 144714#L906-9 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 144698#L2842-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 140374#L2843-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 140373#L871-36 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 132087#L892-36 __utac_acc__Specification3_spec__1_#t~ret104#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret104#1;havoc __utac_acc__Specification3_spec__1_#t~ret104#1; 143505#L2847-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 142079#L2948-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 143501#L1535-3 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 143502#L2224-183 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 144913#L2251-183 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 144673#L1506-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1; 144674#L1518-3 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 146053#L1546-3 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 146051#L1685-6 assume !(0 != timeShift_~tmp___9~2#1); 146052#L1776-9 assume !(1 == ~doorState~0); 149598#L1776-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 149597#L1438-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 149591#L1459-6 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 149590#L1411-6 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 149589#L1058-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 143701#L1227-20 assume !(0 == ~currentFloorID~0); 139857#L1233-20 assume !(~currentFloorID~0 > 0); 133902#L1248-20 assume ~currentFloorID~0 > 0; 137669#L1250-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 134058#L1251-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 132338#L1380-20 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 149475#L1429-6 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 149472#L1784-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 149469#L1473-9 assume !(1 == ~currentHeading~0); 149466#L1483-27 assume !(0 == ~currentFloorID~0); 136058#L1483-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 133233#L1489-19 assume { :end_inline_continueInDirection } true; 133234#L1793-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 133584#L2973-3 assume !(-1 == ~expectedDirection~0); 133888#L2985-3 assume !(1 == ~expectedDirection~0); 135254#L2986-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 138495#L1808-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 133391#L198-2 [2022-11-16 12:41:08,702 INFO L750 eck$LassoCheckResult]: Loop: 133391#L198-2 assume !false; 135333#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 137835#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 138597#L701 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 136365#L206 assume 1 != cleanup_~tmp___0~0#1; 136366#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 139576#L2224-244 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 133036#L2251-244 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 134103#L962 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 131160#L1026 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 138299#L1039 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 132834#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 132835#L854-8 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 134839#L906-12 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 134840#L2842-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 139595#L2843-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 140366#L871-48 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 132290#L892-48 __utac_acc__Specification3_spec__1_#t~ret104#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret104#1;havoc __utac_acc__Specification3_spec__1_#t~ret104#1; 132291#L2847-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 133282#L2948-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 140145#L1535-4 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 143492#L2224-249 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 144819#L2251-249 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 144817#L1506-4 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1; 144818#L1518-4 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 147165#L1546-4 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 147162#L1685-8 assume !(0 != timeShift_~tmp___9~2#1); 147163#L1776-12 assume 1 == ~doorState~0;~doorState~0 := 0; 150951#L1776-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 150949#L1438-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 150945#L1459-8 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 149441#L1411-8 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 149442#L1058-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 144665#L1227-26 assume !(0 == ~currentFloorID~0); 135130#L1233-26 assume !(~currentFloorID~0 > 0); 132821#L1248-26 assume ~currentFloorID~0 > 0; 132823#L1250-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 135570#L1251-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 131185#L1380-26 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 154108#L1429-8 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 154106#L1784-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 154104#L1473-12 assume !(1 == ~currentHeading~0); 132038#L1483-36 assume !(0 == ~currentFloorID~0); 132039#L1483-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 132610#L1489-25 assume { :end_inline_continueInDirection } true; 132611#L1793-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 138856#L2973-4 assume !(-1 == ~expectedDirection~0); 138583#L2985-4 assume !(1 == ~expectedDirection~0); 134638#L2986-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 133390#L1808-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 133391#L198-2 [2022-11-16 12:41:08,702 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:41:08,702 INFO L85 PathProgramCache]: Analyzing trace with hash 657308978, now seen corresponding path program 2 times [2022-11-16 12:41:08,703 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:41:08,703 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [741678950] [2022-11-16 12:41:08,703 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:41:08,703 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:41:08,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:41:09,015 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:41:09,016 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:41:09,016 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [741678950] [2022-11-16 12:41:09,017 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [741678950] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:41:09,018 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:41:09,022 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:41:09,022 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1954562193] [2022-11-16 12:41:09,022 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:41:09,023 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:41:09,023 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:41:09,023 INFO L85 PathProgramCache]: Analyzing trace with hash 1013980326, now seen corresponding path program 1 times [2022-11-16 12:41:09,023 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:41:09,028 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1213994236] [2022-11-16 12:41:09,028 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:41:09,028 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:41:09,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:41:09,131 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:41:09,131 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:41:09,132 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1213994236] [2022-11-16 12:41:09,132 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1213994236] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:41:09,132 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:41:09,132 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 12:41:09,132 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1325285138] [2022-11-16 12:41:09,132 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:41:09,133 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:41:09,133 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:41:09,134 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 12:41:09,135 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 12:41:09,135 INFO L87 Difference]: Start difference. First operand 22962 states and 42345 transitions. cyclomatic complexity: 19384 Second operand has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 6 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:41:20,383 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:41:20,383 INFO L93 Difference]: Finished difference Result 38851 states and 71082 transitions. [2022-11-16 12:41:20,383 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38851 states and 71082 transitions. [2022-11-16 12:41:20,626 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9425 [2022-11-16 12:41:20,764 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38851 states to 38851 states and 71082 transitions. [2022-11-16 12:41:20,764 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38851 [2022-11-16 12:41:20,795 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38851 [2022-11-16 12:41:20,795 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38851 states and 71082 transitions. [2022-11-16 12:41:20,833 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:41:20,833 INFO L218 hiAutomatonCegarLoop]: Abstraction has 38851 states and 71082 transitions. [2022-11-16 12:41:20,867 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38851 states and 71082 transitions. [2022-11-16 12:41:21,328 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38851 to 22962. [2022-11-16 12:41:21,351 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22962 states, 22962 states have (on average 1.8211392735824405) internal successors, (41817), 22961 states have internal predecessors, (41817), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:41:21,401 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22962 states to 22962 states and 41817 transitions. [2022-11-16 12:41:21,401 INFO L240 hiAutomatonCegarLoop]: Abstraction has 22962 states and 41817 transitions. [2022-11-16 12:41:21,402 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-16 12:41:21,402 INFO L428 stractBuchiCegarLoop]: Abstraction has 22962 states and 41817 transitions. [2022-11-16 12:41:21,402 INFO L335 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-11-16 12:41:21,403 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22962 states and 41817 transitions. [2022-11-16 12:41:21,480 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5717 [2022-11-16 12:41:21,480 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:41:21,480 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:41:21,488 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:41:21,488 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:41:21,489 INFO L748 eck$LassoCheckResult]: Stem: 201930#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~maximumWeight~0 := 100;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~weight~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 199974#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 199975#L3402 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 198390#L3395 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1; 196196#L3410 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 196197#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 196252#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 196311#L2217 assume { :end_inline_initFloors } true; 202266#L670 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 196365#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 196366#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 198078#L2495 assume 0 == initPersonOnFloor_~floor#1; 199674#L2496 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 193401#L2603-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 201542#L2287 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 196175#L2299-2 assume { :end_inline_callOnFloor } true; 198564#L2639 assume { :end_inline_initPersonOnFloor } true; 198565#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 201160#L854 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 201156#L906 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 194559#L2842 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 194560#L2904 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 200606#L871-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 195983#L892-5 __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 197617#L2908 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 193449#L2948 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 194593#L1535 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 194595#L854-1 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 200237#L871-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 195852#L875-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 195853#L892-10 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 201800#L1546 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 196465#L1685 assume !(0 != timeShift_~tmp___9~2#1); 196467#L1776 assume !(1 == ~doorState~0); 197610#L1776-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 198463#L1438 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 197600#L1459 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 200744#L1411 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 196583#L1058-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 196584#L1227-2 assume !(0 == ~currentFloorID~0); 199291#L1233-2 assume !(~currentFloorID~0 > 0); 195386#L1248-2 assume ~currentFloorID~0 > 0; 195388#L1250-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 200916#L1251-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 195974#L1380-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 203295#L1429 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 203294#L1784 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 201833#L1473 assume !(1 == ~currentHeading~0); 201834#L1483 assume !(0 == ~currentFloorID~0); 198740#L1483-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 195874#L1489-1 assume { :end_inline_continueInDirection } true; 194562#L1793-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 196541#L2973 assume !(-1 == ~expectedDirection~0); 198072#L2985 assume !(1 == ~expectedDirection~0); 200115#L2986 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 201152#L1808 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 201841#L854-2 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 196084#L906-3 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 196085#L2842-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 196782#L2904-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 195168#L871-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 195169#L892-17 __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 196983#L2908-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 194911#L2948-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 203229#L1535-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 201336#L854-3 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 198783#L871-22 assume !(0 == buttonForFloorIsPressed_~floorID#1); 198784#L875-22 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 207176#L892-22 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 207174#L1546-1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 207167#L1685-2 assume !(0 != timeShift_~tmp___9~2#1); 194137#L1776-3 assume !(1 == ~doorState~0); 194138#L1776-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 196342#L1438-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 198888#L1459-2 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 195208#L1411-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 195209#L1058-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 200048#L1227-8 assume !(0 == ~currentFloorID~0); 201822#L1233-8 assume !(~currentFloorID~0 > 0); 198721#L1248-8 assume ~currentFloorID~0 > 0; 198624#L1250-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 197606#L1251-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 194935#L1380-8 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 211255#L1429-2 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 211256#L1784-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 199677#L1473-3 assume !(1 == ~currentHeading~0); 199678#L1483-9 assume !(0 == ~currentFloorID~0); 200988#L1483-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 200207#L1489-7 assume { :end_inline_continueInDirection } true; 198764#L1793-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 198765#L2973-1 assume !(-1 == ~expectedDirection~0); 193300#L2985-1 assume !(1 == ~expectedDirection~0); 193301#L2986-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 202243#L1808-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 200013#L854-4 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 194690#L906-6 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 194691#L2842-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 199916#L2843-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 193721#L871-24 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 194015#L892-24 __utac_acc__Specification3_spec__1_#t~ret104#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret104#1;havoc __utac_acc__Specification3_spec__1_#t~ret104#1; 204589#L2847-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 204581#L2948-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 204580#L1535-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 199389#L854-5 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 199390#L871-34 assume !(0 == buttonForFloorIsPressed_~floorID#1); 200320#L875-34 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 200321#L892-34 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 204565#L1546-2 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 204558#L1685-4 assume !(0 != timeShift_~tmp___9~2#1); 199624#L1776-6 assume !(1 == ~doorState~0); 197091#L1776-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 197092#L1438-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 198485#L1459-4 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 198486#L1411-4 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 200945#L1058-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 200946#L1227-14 assume !(0 == ~currentFloorID~0); 201335#L1233-14 assume !(~currentFloorID~0 > 0); 198618#L1248-14 assume ~currentFloorID~0 > 0; 198619#L1250-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 197427#L1251-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 193853#L1380-14 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 210524#L1429-4 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 210521#L1784-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 210523#L1473-6 assume !(1 == ~currentHeading~0); 198482#L1483-18 assume !(0 == ~currentFloorID~0); 198483#L1483-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 195461#L1489-13 assume { :end_inline_continueInDirection } true; 193207#L1793-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 193208#L2973-2 assume !(-1 == ~expectedDirection~0); 197898#L2985-2 assume !(1 == ~expectedDirection~0); 200116#L2986-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 200800#L1808-2 assume { :end_inline_timeShift } true; 201573#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 200824#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 197469#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 201041#L2495-1 assume 0 == initPersonOnFloor_~floor#1; 201940#L2496-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 193249#L2603-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 199894#L2287-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 197634#L2299-5 assume { :end_inline_callOnFloor } true; 197635#L2639-1 assume { :end_inline_initPersonOnFloor } true; 201718#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 213145#L854-6 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 213144#L906-9 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 208088#L2842-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 202411#L2843-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 202383#L871-36 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 193919#L892-36 __utac_acc__Specification3_spec__1_#t~ret104#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret104#1;havoc __utac_acc__Specification3_spec__1_#t~ret104#1; 203385#L2847-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 203369#L2948-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 203364#L1535-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 203365#L854-7 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 198198#L871-46 assume !(0 == buttonForFloorIsPressed_~floorID#1); 198199#L875-46 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 210490#L892-46 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 210489#L1546-3 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 210487#L1685-6 assume !(0 != timeShift_~tmp___9~2#1); 210488#L1776-9 assume !(1 == ~doorState~0); 213341#L1776-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 213340#L1438-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 213335#L1459-6 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 212556#L1411-6 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 212557#L1058-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 203293#L1227-20 assume !(0 == ~currentFloorID~0); 201795#L1233-20 assume !(~currentFloorID~0 > 0); 195735#L1248-20 assume ~currentFloorID~0 > 0; 199545#L1250-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 195891#L1251-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 194170#L1380-20 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 215495#L1429-6 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 215494#L1784-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 215493#L1473-9 assume !(1 == ~currentHeading~0); 215432#L1483-27 assume !(0 == ~currentFloorID~0); 197897#L1483-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 195062#L1489-19 assume { :end_inline_continueInDirection } true; 195063#L1793-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 195414#L2973-3 assume !(-1 == ~expectedDirection~0); 195721#L2985-3 assume !(1 == ~expectedDirection~0); 197090#L2986-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 200387#L1808-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 195220#L198-2 [2022-11-16 12:41:21,490 INFO L750 eck$LassoCheckResult]: Loop: 195220#L198-2 assume !false; 197168#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 199710#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 200494#L701 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 198211#L206 assume 1 != cleanup_~tmp___0~0#1; 198212#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 201510#L2224-244 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 194864#L2251-244 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 195935#L962 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 193002#L1026 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 200190#L1039 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 200191#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 210538#L854-8 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 210525#L906-12 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 201531#L2842-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 201533#L2904-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 202371#L871-53 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 197996#L892-53 __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 208668#L2908-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 208659#L2948-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 208657#L1535-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 208315#L854-9 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 202308#L871-58 assume !(0 == buttonForFloorIsPressed_~floorID#1); 202309#L875-58 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 209585#L892-58 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 209579#L1546-4 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 209576#L1685-8 assume !(0 != timeShift_~tmp___9~2#1); 209577#L1776-12 assume 1 == ~doorState~0;~doorState~0 := 0; 214830#L1776-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 214828#L1438-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 214802#L1459-8 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 214801#L1411-8 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 214800#L1058-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 203312#L1227-26 assume !(0 == ~currentFloorID~0); 196968#L1233-26 assume !(~currentFloorID~0 > 0); 194648#L1248-26 assume ~currentFloorID~0 > 0; 194650#L1250-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 197407#L1251-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 193026#L1380-26 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 215295#L1429-8 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 215294#L1784-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 215293#L1473-12 assume !(1 == ~currentHeading~0); 193871#L1483-36 assume !(0 == ~currentFloorID~0); 193872#L1483-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 194441#L1489-25 assume { :end_inline_continueInDirection } true; 194442#L1793-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 200765#L2973-4 assume !(-1 == ~expectedDirection~0); 200478#L2985-4 assume !(1 == ~expectedDirection~0); 196469#L2986-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 195219#L1808-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 195220#L198-2 [2022-11-16 12:41:21,491 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:41:21,492 INFO L85 PathProgramCache]: Analyzing trace with hash -152249218, now seen corresponding path program 1 times [2022-11-16 12:41:21,492 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:41:21,492 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [590160237] [2022-11-16 12:41:21,492 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:41:21,492 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:41:21,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:41:21,685 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:41:21,685 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:41:21,685 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [590160237] [2022-11-16 12:41:21,685 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [590160237] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:41:21,686 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:41:21,686 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:41:21,686 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [534188096] [2022-11-16 12:41:21,686 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:41:21,687 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:41:21,687 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:41:21,687 INFO L85 PathProgramCache]: Analyzing trace with hash 1645121924, now seen corresponding path program 1 times [2022-11-16 12:41:21,687 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:41:21,688 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [167752928] [2022-11-16 12:41:21,689 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:41:21,689 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:41:21,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:41:21,726 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:41:21,726 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:41:21,726 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [167752928] [2022-11-16 12:41:21,727 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [167752928] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:41:21,727 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:41:21,727 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:41:21,727 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1280630474] [2022-11-16 12:41:21,727 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:41:21,728 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:41:21,728 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:41:21,728 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 12:41:21,728 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 12:41:21,729 INFO L87 Difference]: Start difference. First operand 22962 states and 41817 transitions. cyclomatic complexity: 18856 Second operand has 3 states, 3 states have (on average 16.666666666666668) internal successors, (50), 3 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:41:24,860 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:41:24,861 INFO L93 Difference]: Finished difference Result 39619 states and 71683 transitions. [2022-11-16 12:41:24,861 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39619 states and 71683 transitions. [2022-11-16 12:41:25,168 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 10148 [2022-11-16 12:41:25,256 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39619 states to 39619 states and 71683 transitions. [2022-11-16 12:41:25,256 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 39619 [2022-11-16 12:41:25,283 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 39619 [2022-11-16 12:41:25,283 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39619 states and 71683 transitions. [2022-11-16 12:41:25,329 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:41:25,329 INFO L218 hiAutomatonCegarLoop]: Abstraction has 39619 states and 71683 transitions. [2022-11-16 12:41:25,361 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39619 states and 71683 transitions. [2022-11-16 12:41:25,902 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39619 to 39461. [2022-11-16 12:41:25,948 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39461 states, 39461 states have (on average 1.8125490991105142) internal successors, (71525), 39460 states have internal predecessors, (71525), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:41:26,046 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39461 states to 39461 states and 71525 transitions. [2022-11-16 12:41:26,046 INFO L240 hiAutomatonCegarLoop]: Abstraction has 39461 states and 71525 transitions. [2022-11-16 12:41:26,047 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 12:41:26,048 INFO L428 stractBuchiCegarLoop]: Abstraction has 39461 states and 71525 transitions. [2022-11-16 12:41:26,048 INFO L335 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-11-16 12:41:26,048 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39461 states and 71525 transitions. [2022-11-16 12:41:26,382 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 10104 [2022-11-16 12:41:26,383 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:41:26,383 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:41:26,391 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:41:26,392 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:41:26,392 INFO L748 eck$LassoCheckResult]: Stem: 264693#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~maximumWeight~0 := 100;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~weight~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 262650#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 262651#L3402 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 261010#L3395 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1; 258768#L3410 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 258769#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 258829#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 258889#L2217 assume { :end_inline_initFloors } true; 265044#L670 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 258945#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 258946#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 260694#L2495 assume 0 == initPersonOnFloor_~floor#1; 262317#L2496 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 255983#L2603-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 264296#L2287 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 258747#L2299-2 assume { :end_inline_callOnFloor } true; 261184#L2639 assume { :end_inline_initPersonOnFloor } true; 261185#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 263890#L854 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 263885#L906 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 257132#L2842 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 257133#L2904 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 263308#L871-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 258557#L892-5 __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 260235#L2908 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 256030#L2948 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 257165#L1535 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 257167#L854-1 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 262931#L871-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 258423#L875-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 258424#L892-10 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 264562#L1546 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 259044#L1685 assume !(0 != timeShift_~tmp___9~2#1); 259046#L1776 assume !(1 == ~doorState~0); 260225#L1776-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 261080#L1438 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 260215#L1459 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 263454#L1411 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 259161#L1058-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 259162#L1227-2 assume !(0 == ~currentFloorID~0); 261927#L1233-2 assume ~currentFloorID~0 > 0; 259904#L1234-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 259905#L2224-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 257122#L2251-26 stopRequestedInDirection__wrappee__weight_#t~ret38#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___9~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret38#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret38#1; 262661#L1238-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 258548#L1380-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 269576#L1429 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 269574#L1784 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 269573#L1473 assume !(1 == ~currentHeading~0); 269570#L1483 assume !(0 == ~currentFloorID~0); 269569#L1483-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 263788#L1489-1 assume { :end_inline_continueInDirection } true; 269568#L1793-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 269562#L2973 assume !(-1 == ~expectedDirection~0); 269560#L2985 assume !(1 == ~expectedDirection~0); 269554#L2986 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 269552#L1808 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 269551#L854-2 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 269550#L906-3 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 269548#L2842-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 269547#L2904-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 269541#L871-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 269542#L892-17 __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 269502#L2908-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 269489#L2948-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 269487#L1535-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 269488#L854-3 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 269645#L871-22 assume !(0 == buttonForFloorIsPressed_~floorID#1); 269643#L875-22 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 269466#L892-22 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 269464#L1546-1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 269456#L1685-2 assume !(0 != timeShift_~tmp___9~2#1); 269457#L1776-3 assume !(1 == ~doorState~0); 273088#L1776-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 273085#L1438-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 273082#L1459-2 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 273080#L1411-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 273081#L1058-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 265242#L1227-8 assume !(0 == ~currentFloorID~0); 265210#L1233-8 assume ~currentFloorID~0 > 0; 261342#L1234-8 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1); 261343#L1248-8 assume ~currentFloorID~0 > 0; 261245#L1250-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 260221#L1251-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 257502#L1380-8 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 272998#L1429-2 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 272999#L1784-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 262319#L1473-3 assume !(1 == ~currentHeading~0); 262320#L1483-9 assume !(0 == ~currentFloorID~0); 263708#L1483-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 262895#L1489-7 assume { :end_inline_continueInDirection } true; 262334#L1793-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 269838#L2973-1 assume !(-1 == ~expectedDirection~0); 269836#L2985-1 assume !(1 == ~expectedDirection~0); 269834#L2986-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 269833#L1808-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 269828#L854-4 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 269826#L906-6 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 269825#L2842-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 269823#L2843-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 268509#L871-24 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 269810#L892-24 __utac_acc__Specification3_spec__1_#t~ret104#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret104#1;havoc __utac_acc__Specification3_spec__1_#t~ret104#1; 268460#L2847-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 268452#L2948-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 268446#L1535-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 268444#L854-5 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 268428#L871-34 assume !(0 == buttonForFloorIsPressed_~floorID#1); 268421#L875-34 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 268414#L892-34 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 268409#L1546-2 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 268406#L1685-4 assume !(0 != timeShift_~tmp___9~2#1); 268402#L1776-6 assume !(1 == ~doorState~0); 268399#L1776-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 268386#L1438-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 268382#L1459-4 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 268378#L1411-4 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 268379#L1058-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 265264#L1227-14 assume !(0 == ~currentFloorID~0); 265174#L1233-14 assume ~currentFloorID~0 > 0; 263238#L1234-14 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1); 261244#L1248-14 assume ~currentFloorID~0 > 0; 264484#L1250-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 260028#L1251-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 259553#L1380-14 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 268331#L1429-4 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 268329#L1784-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 268328#L1473-6 assume !(1 == ~currentHeading~0); 261100#L1483-18 assume !(0 == ~currentFloorID~0); 261101#L1483-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 258026#L1489-13 assume { :end_inline_continueInDirection } true; 258027#L1793-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 273437#L2973-2 assume !(-1 == ~expectedDirection~0); 273434#L2985-2 assume !(1 == ~expectedDirection~0); 273432#L2986-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 273431#L1808-2 assume { :end_inline_timeShift } true; 273430#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 273429#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 273423#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 273422#L2495-1 assume 0 == initPersonOnFloor_~floor#1; 273409#L2496-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 273383#L2603-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 273376#L2287-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 273371#L2299-5 assume { :end_inline_callOnFloor } true; 273370#L2639-1 assume { :end_inline_initPersonOnFloor } true; 273368#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 273366#L854-6 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 273365#L906-9 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 273363#L2842-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 273362#L2843-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 272325#L871-36 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 256495#L892-36 __utac_acc__Specification3_spec__1_#t~ret104#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret104#1;havoc __utac_acc__Specification3_spec__1_#t~ret104#1; 274934#L2847-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 273369#L2948-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 274128#L1535-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 274127#L854-7 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 274126#L871-46 assume !(0 == buttonForFloorIsPressed_~floorID#1); 263450#L875-46 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 261617#L892-46 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 283272#L1546-3 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 272708#L1685-6 assume !(0 != timeShift_~tmp___9~2#1); 270399#L1776-9 assume !(1 == ~doorState~0); 266964#L1776-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 265604#L1438-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 265599#L1459-6 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 265597#L1411-6 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 265596#L1058-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 265262#L1227-20 assume !(0 == ~currentFloorID~0); 265177#L1233-20 assume ~currentFloorID~0 > 0; 258304#L1234-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 258305#L2224-209 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 256908#L2251-209 stopRequestedInDirection__wrappee__weight_#t~ret38#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___9~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret38#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret38#1; 265070#L1238-20 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 256741#L1380-20 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 265407#L1429-6 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 265408#L1784-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 265403#L1473-9 assume !(1 == ~currentHeading~0); 265353#L1483-27 assume !(0 == ~currentFloorID~0); 260513#L1483-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 265022#L1489-19 assume { :end_inline_continueInDirection } true; 277781#L1793-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 277776#L2973-3 assume !(-1 == ~expectedDirection~0); 277770#L2985-3 assume !(1 == ~expectedDirection~0); 277767#L2986-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 277766#L1808-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 277764#L198-2 [2022-11-16 12:41:26,394 INFO L750 eck$LassoCheckResult]: Loop: 277764#L198-2 assume !false; 277763#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 277762#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 277761#L701 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 277760#L206 assume 1 != cleanup_~tmp___0~0#1; 277759#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 277754#L2224-244 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 277246#L2251-244 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 276726#L962 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 276713#L1026 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 276712#L1039 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 276711#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 276710#L854-8 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 276708#L906-12 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 276705#L2842-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 276703#L2904-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 276704#L871-53 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 277624#L892-53 __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 277365#L2908-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 277357#L2948-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 277355#L1535-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 277356#L854-9 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 277579#L871-58 assume !(0 == buttonForFloorIsPressed_~floorID#1); 277578#L875-58 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 277339#L892-58 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 277338#L1546-4 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 277336#L1685-8 assume !(0 != timeShift_~tmp___9~2#1); 277335#L1776-12 assume 1 == ~doorState~0;~doorState~0 := 0; 277334#L1776-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 277285#L1438-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 277281#L1459-8 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 277271#L1411-8 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 276905#L1058-26 assume 1 == stopRequestedInDirection__wrappee__weight_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~22#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~22#1;isTopFloor_~retValue_acc~22#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~22#1; 276906#L2798-38 stopRequestedInDirection__wrappee__weight_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__weight_~tmp~15#1 := stopRequestedInDirection__wrappee__weight_#t~ret32#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1; 286975#L1062-26 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~15#1); 286974#L1068-26 assume !(~currentFloorID~0 < 0); 286973#L1083-26 assume ~currentFloorID~0 < 0; 264979#L1085-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 264939#L1086-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 262549#L1380-26 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 281672#L1429-8 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 281650#L1784-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 281648#L1473-12 assume !(1 == ~currentHeading~0); 281003#L1483-36 assume !(0 == ~currentFloorID~0); 278703#L1483-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 261573#L1489-25 assume { :end_inline_continueInDirection } true; 277782#L1793-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 277779#L2973-4 assume !(-1 == ~expectedDirection~0); 277773#L2985-4 assume !(1 == ~expectedDirection~0); 277768#L2986-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 277765#L1808-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 277764#L198-2 [2022-11-16 12:41:26,395 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:41:26,395 INFO L85 PathProgramCache]: Analyzing trace with hash -496510236, now seen corresponding path program 1 times [2022-11-16 12:41:26,395 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:41:26,395 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2026637262] [2022-11-16 12:41:26,395 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:41:26,396 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:41:26,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:41:26,578 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:41:26,579 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:41:26,579 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2026637262] [2022-11-16 12:41:26,579 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2026637262] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:41:26,579 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:41:26,579 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:41:26,584 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1171139484] [2022-11-16 12:41:26,584 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:41:26,585 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:41:26,585 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:41:26,586 INFO L85 PathProgramCache]: Analyzing trace with hash 1275137231, now seen corresponding path program 1 times [2022-11-16 12:41:26,586 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:41:26,586 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1275244256] [2022-11-16 12:41:26,586 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:41:26,586 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:41:26,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:41:26,690 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:41:26,691 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:41:26,692 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1275244256] [2022-11-16 12:41:26,692 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1275244256] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:41:26,692 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:41:26,692 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:41:26,692 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [833669216] [2022-11-16 12:41:26,693 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:41:26,693 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:41:26,693 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:41:26,694 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 12:41:26,695 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-16 12:41:26,695 INFO L87 Difference]: Start difference. First operand 39461 states and 71525 transitions. cyclomatic complexity: 32065 Second operand has 7 states, 7 states have (on average 7.285714285714286) internal successors, (51), 7 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:41:29,503 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:41:29,503 INFO L93 Difference]: Finished difference Result 112572 states and 206328 transitions. [2022-11-16 12:41:29,504 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 112572 states and 206328 transitions. [2022-11-16 12:41:30,114 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 30270 [2022-11-16 12:41:30,395 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 112572 states to 112428 states and 206088 transitions. [2022-11-16 12:41:30,395 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 112428 [2022-11-16 12:41:30,470 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 112428 [2022-11-16 12:41:30,470 INFO L73 IsDeterministic]: Start isDeterministic. Operand 112428 states and 206088 transitions. [2022-11-16 12:41:30,522 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:41:30,522 INFO L218 hiAutomatonCegarLoop]: Abstraction has 112428 states and 206088 transitions. [2022-11-16 12:41:30,612 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 112428 states and 206088 transitions. [2022-11-16 12:41:31,661 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 112428 to 49427. [2022-11-16 12:41:31,716 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 49427 states, 49427 states have (on average 1.810407267283064) internal successors, (89483), 49426 states have internal predecessors, (89483), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:41:32,269 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49427 states to 49427 states and 89483 transitions. [2022-11-16 12:41:32,269 INFO L240 hiAutomatonCegarLoop]: Abstraction has 49427 states and 89483 transitions. [2022-11-16 12:41:32,271 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-16 12:41:32,271 INFO L428 stractBuchiCegarLoop]: Abstraction has 49427 states and 89483 transitions. [2022-11-16 12:41:32,272 INFO L335 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-11-16 12:41:32,272 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 49427 states and 89483 transitions. [2022-11-16 12:41:32,401 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 12698 [2022-11-16 12:41:32,401 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:41:32,401 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:41:32,407 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:41:32,408 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:41:32,408 INFO L748 eck$LassoCheckResult]: Stem: 417332#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~maximumWeight~0 := 100;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~weight~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 414885#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 414886#L3402 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 413130#L3395 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1; 410812#L3410 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 410813#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 410873#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 410932#L2217 assume { :end_inline_initFloors } true; 417891#L670 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 410988#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 410989#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 412801#L2495 assume 0 == initPersonOnFloor_~floor#1; 414529#L2496 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 408054#L2603-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 416785#L2287 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 410789#L2299-2 assume { :end_inline_callOnFloor } true; 413308#L2639 assume { :end_inline_initPersonOnFloor } true; 413309#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 416285#L854 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 416277#L906 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 409186#L2842 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 409187#L2904 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 415614#L871-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 410596#L892-5 __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 412319#L2908 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 408101#L2948 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 409221#L1535 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 409223#L854-1 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 415187#L871-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 410465#L875-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 410466#L892-10 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 417139#L1546 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 411081#L1685 assume !(0 != timeShift_~tmp___9~2#1); 411083#L1776 assume !(1 == ~doorState~0); 412304#L1776-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 413204#L1438 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 412296#L1459 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 415771#L1411 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 411205#L1058-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 411206#L1227-2 assume !(0 == ~currentFloorID~0); 414122#L1233-2 assume ~currentFloorID~0 > 0; 411971#L1234-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 411972#L2224-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 409176#L2251-26 stopRequestedInDirection__wrappee__weight_#t~ret38#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___9~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret38#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret38#1; 414897#L1238-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 410665#L1380-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 418168#L1429 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 418164#L1784 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 417191#L1473 assume !(1 == ~currentHeading~0); 417192#L1483 assume !(0 == ~currentFloorID~0); 416162#L1483-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 410488#L1489-1 assume { :end_inline_continueInDirection } true; 409189#L1793-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 411165#L2973 assume !(-1 == ~expectedDirection~0); 412792#L2985 assume !(1 == ~expectedDirection~0); 415044#L2986 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 416273#L1808 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 417204#L854-2 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 410702#L906-3 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 410703#L2842-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 411408#L2904-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 409777#L871-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 409778#L892-17 __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 411613#L2908-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 409528#L2948-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 415255#L1535-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 415256#L854-3 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 413560#L871-22 assume !(0 == buttonForFloorIsPressed_~floorID#1); 408973#L875-22 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 408974#L892-22 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 416735#L1546-1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 416736#L1685-2 assume !(0 != timeShift_~tmp___9~2#1); 408770#L1776-3 assume !(1 == ~doorState~0); 408771#L1776-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 410962#L1438-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 413679#L1459-2 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 409814#L1411-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 409815#L1058-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 414968#L1227-8 assume !(0 == ~currentFloorID~0); 418385#L1233-8 assume ~currentFloorID~0 > 0; 418386#L1234-8 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1); 437445#L1248-8 assume ~currentFloorID~0 > 0; 413376#L1250-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 413378#L1251-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 437441#L1380-8 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 437440#L1429-2 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 437438#L1784-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 414531#L1473-3 assume !(1 == ~currentHeading~0); 414532#L1483-9 assume !(0 == ~currentFloorID~0); 416062#L1483-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 415152#L1489-7 assume { :end_inline_continueInDirection } true; 414546#L1793-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 417969#L2973-1 assume !(-1 == ~expectedDirection~0); 407957#L2985-1 assume !(1 == ~expectedDirection~0); 407958#L2986-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 417849#L1808-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 435582#L854-4 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 435581#L906-6 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 435580#L2842-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 426040#L2904-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 429360#L871-29 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 410355#L892-29 __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 436723#L2908-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 436719#L2948-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 436717#L1535-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 436718#L854-5 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 437423#L871-34 assume !(0 == buttonForFloorIsPressed_~floorID#1); 415287#L875-34 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 415288#L892-34 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 436707#L1546-2 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 436706#L1685-4 assume !(0 != timeShift_~tmp___9~2#1); 414471#L1776-6 assume !(1 == ~doorState~0); 414472#L1776-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 427371#L1438-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 427286#L1459-4 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 427287#L1411-4 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 435534#L1058-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 429818#L1227-14 assume !(0 == ~currentFloorID~0); 418291#L1233-14 assume ~currentFloorID~0 > 0; 418292#L1234-14 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1); 429711#L1248-14 assume ~currentFloorID~0 > 0; 417033#L1250-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 417035#L1251-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 429705#L1380-14 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 429703#L1429-4 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 429701#L1784-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 415507#L1473-6 assume !(1 == ~currentHeading~0); 413225#L1483-18 assume !(0 == ~currentFloorID~0); 413226#L1483-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 410072#L1489-13 assume { :end_inline_continueInDirection } true; 407868#L1793-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 407869#L2973-2 assume !(-1 == ~expectedDirection~0); 412610#L2985-2 assume !(1 == ~expectedDirection~0); 415047#L2986-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 415843#L1808-2 assume { :end_inline_timeShift } true; 416824#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 415879#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 412153#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 416121#L2495-1 assume 0 == initPersonOnFloor_~floor#1; 417346#L2496-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 407909#L2603-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 414792#L2287-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 412336#L2299-5 assume { :end_inline_callOnFloor } true; 412337#L2639-1 assume { :end_inline_initPersonOnFloor } true; 417015#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 434935#L854-6 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 434934#L906-9 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 434933#L2842-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 429677#L2904-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 434905#L871-41 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 416598#L892-41 __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 434902#L2908-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 434893#L2948-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 434891#L1535-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 434886#L854-7 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 434884#L871-46 assume !(0 == buttonForFloorIsPressed_~floorID#1); 434875#L875-46 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 434870#L892-46 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 434869#L1546-3 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 434867#L1685-6 assume !(0 != timeShift_~tmp___9~2#1); 434868#L1776-9 assume !(1 == ~doorState~0); 435467#L1776-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 429500#L1438-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 429496#L1459-6 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 429477#L1411-6 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 429479#L1058-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 418434#L1227-20 assume !(0 == ~currentFloorID~0); 418294#L1233-20 assume ~currentFloorID~0 > 0; 410351#L1234-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 410352#L2224-209 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 408964#L2251-209 stopRequestedInDirection__wrappee__weight_#t~ret38#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___9~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret38#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret38#1; 417941#L1238-20 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 437315#L1380-20 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 437312#L1429-6 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 437310#L1784-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 409917#L1473-9 assume !(1 == ~currentHeading~0); 409918#L1483-27 assume !(0 == ~currentFloorID~0); 412608#L1483-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 409678#L1489-19 assume { :end_inline_continueInDirection } true; 409679#L1793-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 410019#L2973-3 assume !(-1 == ~expectedDirection~0); 410339#L2985-3 assume !(1 == ~expectedDirection~0); 411730#L2986-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 415361#L1808-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 409826#L198-2 [2022-11-16 12:41:32,409 INFO L750 eck$LassoCheckResult]: Loop: 409826#L198-2 assume !false; 411814#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 414568#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 415480#L701 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 412938#L206 assume 1 != cleanup_~tmp___0~0#1; 412939#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 416732#L2224-244 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 409483#L2251-244 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 410550#L962 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 407668#L1026 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 415133#L1039 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 415134#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 434760#L854-8 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 434759#L906-12 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 434758#L2842-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 418790#L2904-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 431444#L871-53 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 412707#L892-53 __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 433769#L2908-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 433761#L2948-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 433759#L1535-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 433750#L854-9 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 433747#L871-58 assume !(0 == buttonForFloorIsPressed_~floorID#1); 433743#L875-58 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 433738#L892-58 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 433737#L1546-4 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 433735#L1685-8 assume !(0 != timeShift_~tmp___9~2#1); 433734#L1776-12 assume 1 == ~doorState~0;~doorState~0 := 0; 433733#L1776-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 433723#L1438-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 433719#L1459-8 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 433716#L1411-8 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 429850#L1058-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 418444#L1227-26 assume !(0 == ~currentFloorID~0); 418264#L1233-26 assume ~currentFloorID~0 > 0; 415061#L1234-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 415062#L2224-275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 411176#L2251-275 stopRequestedInDirection__wrappee__weight_#t~ret38#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___9~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret38#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret38#1; 411177#L1238-26 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 429859#L1380-26 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 429856#L1429-8 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 429854#L1784-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 407945#L1473-12 assume !(1 == ~currentHeading~0); 407946#L1483-36 assume !(0 == ~currentFloorID~0); 408512#L1483-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 409068#L1489-25 assume { :end_inline_continueInDirection } true; 409069#L1793-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 415796#L2973-4 assume !(-1 == ~expectedDirection~0); 415464#L2985-4 assume !(1 == ~expectedDirection~0); 411085#L2986-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 409825#L1808-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 409826#L198-2 [2022-11-16 12:41:32,410 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:41:32,410 INFO L85 PathProgramCache]: Analyzing trace with hash -757692028, now seen corresponding path program 1 times [2022-11-16 12:41:32,411 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:41:32,411 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [77961888] [2022-11-16 12:41:32,411 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:41:32,411 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:41:32,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:41:32,568 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:41:32,568 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:41:32,569 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [77961888] [2022-11-16 12:41:32,569 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [77961888] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:41:32,569 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:41:32,569 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:41:32,569 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1509010393] [2022-11-16 12:41:32,570 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:41:32,570 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:41:32,570 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:41:32,570 INFO L85 PathProgramCache]: Analyzing trace with hash 144380797, now seen corresponding path program 1 times [2022-11-16 12:41:32,571 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:41:32,571 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1535814842] [2022-11-16 12:41:32,571 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:41:32,571 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:41:32,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:41:32,600 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:41:32,600 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:41:32,600 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1535814842] [2022-11-16 12:41:32,601 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1535814842] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:41:32,601 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:41:32,601 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:41:32,601 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [600650626] [2022-11-16 12:41:32,601 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:41:32,602 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:41:32,602 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:41:32,602 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 12:41:32,602 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 12:41:32,603 INFO L87 Difference]: Start difference. First operand 49427 states and 89483 transitions. cyclomatic complexity: 40058 Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:41:33,327 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:41:33,327 INFO L93 Difference]: Finished difference Result 64944 states and 117566 transitions. [2022-11-16 12:41:33,327 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 64944 states and 117566 transitions. [2022-11-16 12:41:33,522 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 16600 [2022-11-16 12:41:33,670 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 64944 states to 64944 states and 117566 transitions. [2022-11-16 12:41:33,670 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 64944 [2022-11-16 12:41:33,705 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 64944 [2022-11-16 12:41:33,705 INFO L73 IsDeterministic]: Start isDeterministic. Operand 64944 states and 117566 transitions. [2022-11-16 12:41:33,734 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:41:33,734 INFO L218 hiAutomatonCegarLoop]: Abstraction has 64944 states and 117566 transitions. [2022-11-16 12:41:33,777 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64944 states and 117566 transitions. [2022-11-16 12:41:34,567 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64944 to 63850. [2022-11-16 12:41:34,611 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 63850 states, 63850 states have (on average 1.8120908379013312) internal successors, (115702), 63849 states have internal predecessors, (115702), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:41:35,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63850 states to 63850 states and 115702 transitions. [2022-11-16 12:41:35,123 INFO L240 hiAutomatonCegarLoop]: Abstraction has 63850 states and 115702 transitions. [2022-11-16 12:41:35,123 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 12:41:35,124 INFO L428 stractBuchiCegarLoop]: Abstraction has 63850 states and 115702 transitions. [2022-11-16 12:41:35,124 INFO L335 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-11-16 12:41:35,124 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 63850 states and 115702 transitions. [2022-11-16 12:41:35,345 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 16090 [2022-11-16 12:41:35,345 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:41:35,345 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:41:35,352 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:41:35,352 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:41:35,353 INFO L748 eck$LassoCheckResult]: Stem: 531328#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~maximumWeight~0 := 100;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~weight~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 529109#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 529110#L3402 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 527418#L3395 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1; 525175#L3410 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 525176#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 525237#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 525294#L2217 assume { :end_inline_initFloors } true; 531802#L670 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 525347#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 525348#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 527102#L2495 assume 0 == initPersonOnFloor_~floor#1; 528756#L2496 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 522432#L2603-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 530866#L2287 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 525155#L2299-2 assume { :end_inline_callOnFloor } true; 527589#L2639 assume { :end_inline_initPersonOnFloor } true; 527590#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 530411#L854 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 530406#L906 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 523567#L2842 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 523568#L2904 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 525535#L2914 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 525536#L2925 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 525732#L2936 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 525734#L2947 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 522480#L2948 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 532743#L1535 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 532741#L854-1 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 532740#L871-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 532732#L875-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 532726#L892-10 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 532725#L1546 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 532723#L1685 assume !(0 != timeShift_~tmp___9~2#1); 532722#L1776 assume !(1 == ~doorState~0); 532717#L1776-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 532702#L1438 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 532701#L1459 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 532602#L1411 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 532596#L1058-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 532594#L1227-2 assume !(0 == ~currentFloorID~0); 532590#L1233-2 assume ~currentFloorID~0 > 0; 532586#L1234-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 532587#L2224-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 532814#L2251-26 stopRequestedInDirection__wrappee__weight_#t~ret38#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___9~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret38#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret38#1; 532481#L1238-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 532475#L1380-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 532463#L1429 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 532464#L1784 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 544476#L1473 assume !(1 == ~currentHeading~0); 531554#L1483 assume !(0 == ~currentFloorID~0); 530300#L1483-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 530301#L1489-1 assume { :end_inline_continueInDirection } true; 550743#L1793-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 546370#L2973 assume !(-1 == ~expectedDirection~0); 546371#L2985 assume !(1 == ~expectedDirection~0); 548248#L2986 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 548194#L1808 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 548193#L854-2 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 548192#L906-3 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 548191#L2842-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 532011#L2904-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 548190#L2914-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 548189#L2925-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 548188#L2936-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 534881#L2947-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 530809#L2948-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 530810#L1535-1 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 545672#L2224-61 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 526524#L2251-61 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 531678#L1506-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1; 524442#L1518-1 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 530829#L1546-1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 530830#L1685-2 assume !(0 != timeShift_~tmp___9~2#1); 523149#L1776-3 assume !(1 == ~doorState~0); 523150#L1776-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 525323#L1438-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 527941#L1459-2 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 544813#L1411-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 544687#L1058-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 544688#L1227-8 assume !(0 == ~currentFloorID~0); 544674#L1233-8 assume ~currentFloorID~0 > 0; 544673#L1234-8 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1); 544448#L1248-8 assume ~currentFloorID~0 > 0; 544449#L1250-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 544565#L1251-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 544558#L1380-8 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 544557#L1429-2 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 544554#L1784-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 544556#L1473-3 assume !(1 == ~currentHeading~0); 551507#L1483-9 assume !(0 == ~currentFloorID~0); 551503#L1483-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 529354#L1489-7 assume { :end_inline_continueInDirection } true; 527815#L1793-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 527816#L2973-1 assume !(-1 == ~expectedDirection~0); 561462#L2985-1 assume !(1 == ~expectedDirection~0); 522338#L2986-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 531773#L1808-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 544158#L854-4 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 542958#L906-6 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 542827#L2842-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 532049#L2904-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 542580#L2914-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 542594#L2925-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 542595#L2936-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 542590#L2947-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 542591#L2948-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 560842#L1535-2 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 560841#L2224-122 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 560836#L2251-122 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 560833#L1506-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1; 560827#L1518-2 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 560825#L1546-2 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 560818#L1685-4 assume !(0 != timeShift_~tmp___9~2#1); 528703#L1776-6 assume !(1 == ~doorState~0); 526077#L1776-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 526078#L1438-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 527808#L1459-4 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 544817#L1411-4 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 544815#L1058-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 544816#L1227-14 assume !(0 == ~currentFloorID~0); 544794#L1233-14 assume ~currentFloorID~0 > 0; 544793#L1234-14 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1); 544710#L1248-14 assume ~currentFloorID~0 > 0; 531097#L1250-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 531099#L1251-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 544702#L1380-14 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 544700#L1429-4 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 544366#L1784-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 529693#L1473-6 assume !(1 == ~currentHeading~0); 529694#L1483-18 assume !(0 == ~currentFloorID~0); 559261#L1483-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 559225#L1489-13 assume { :end_inline_continueInDirection } true; 559141#L1793-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 546430#L2973-2 assume !(-1 == ~expectedDirection~0); 546431#L2985-2 assume !(1 == ~expectedDirection~0); 546426#L2986-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 546425#L1808-2 assume { :end_inline_timeShift } true; 546424#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 546423#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 546411#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 546407#L2495-1 assume 0 == initPersonOnFloor_~floor#1; 546330#L2496-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 546304#L2603-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 546270#L2287-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 546266#L2299-5 assume { :end_inline_callOnFloor } true; 546264#L2639-1 assume { :end_inline_initPersonOnFloor } true; 546262#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 546260#L854-6 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 546258#L906-9 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 546256#L2842-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 533504#L2904-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 546251#L2914-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 546250#L2925-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 546246#L2936-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 546242#L2947-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 546232#L2948-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 546229#L1535-3 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 546227#L2224-183 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 546224#L2251-183 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 546205#L1506-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1; 546204#L1518-3 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 546202#L1546-3 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 546199#L1685-6 assume !(0 != timeShift_~tmp___9~2#1); 546200#L1776-9 assume !(1 == ~doorState~0); 573522#L1776-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 573520#L1438-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 573514#L1459-6 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 573507#L1411-6 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 573508#L1058-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 573497#L1227-20 assume !(0 == ~currentFloorID~0); 546186#L1233-20 assume ~currentFloorID~0 > 0; 546184#L1234-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 546185#L2224-209 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 546879#L2251-209 stopRequestedInDirection__wrappee__weight_#t~ret38#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___9~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret38#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret38#1; 545930#L1238-20 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 545821#L1380-20 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 545816#L1429-6 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 545810#L1784-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 545812#L1473-9 assume !(1 == ~currentHeading~0); 567139#L1483-27 assume !(0 == ~currentFloorID~0); 567125#L1483-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 567119#L1489-19 assume { :end_inline_continueInDirection } true; 567116#L1793-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 567114#L2973-3 assume !(-1 == ~expectedDirection~0); 567112#L2985-3 assume !(1 == ~expectedDirection~0); 567107#L2986-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 567106#L1808-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 567104#L198-2 [2022-11-16 12:41:35,355 INFO L750 eck$LassoCheckResult]: Loop: 567104#L198-2 assume !false; 567103#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 567102#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 567097#L701 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 567095#L206 assume 1 != cleanup_~tmp___0~0#1; 567094#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 567085#L2224-244 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 567083#L2251-244 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 567071#L962 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 567058#L1026 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 567057#L1039 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 544320#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 544319#L854-8 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 544159#L906-12 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 544052#L2842-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 532116#L2904-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 543578#L2914-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 543590#L2925-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 543605#L2936-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 543597#L2947-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 543598#L2948-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 562634#L1535-4 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;havoc stopRequestedAtCurrentFloor__wrappee__weight_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret49#1, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 562577#L2224-249 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 562578#L2251-249 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret48#1; 562627#L1506-4 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6#1;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res#1 := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16#1; 562563#L1518-4 stopRequestedAtCurrentFloor_#t~ret52#1 := stopRequestedAtCurrentFloor__wrappee__weight_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__weight } true;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := stopRequestedAtCurrentFloor_#t~ret52#1;havoc stopRequestedAtCurrentFloor_#t~ret52#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 562483#L1546-4 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 561488#L1685-8 assume !(0 != timeShift_~tmp___9~2#1); 561490#L1776-12 assume 1 == ~doorState~0;~doorState~0 := 0; 574030#L1776-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 559180#L1438-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 559177#L1459-8 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 558726#L1411-8 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 558728#L1058-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 572094#L1227-26 assume !(0 == ~currentFloorID~0); 545793#L1233-26 assume ~currentFloorID~0 > 0; 529272#L1234-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 529273#L2224-275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 525532#L2251-275 stopRequestedInDirection__wrappee__weight_#t~ret38#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___9~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret38#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret38#1; 525533#L1238-26 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 557665#L1380-26 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 557662#L1429-8 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 557659#L1784-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 557661#L1473-12 assume !(1 == ~currentHeading~0); 545674#L1483-36 assume !(0 == ~currentFloorID~0); 526034#L1483-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 570049#L1489-25 assume { :end_inline_continueInDirection } true; 570046#L1793-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 570044#L2973-4 assume !(-1 == ~expectedDirection~0); 570042#L2985-4 assume !(1 == ~expectedDirection~0); 567108#L2986-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 567105#L1808-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 567104#L198-2 [2022-11-16 12:41:35,356 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:41:35,356 INFO L85 PathProgramCache]: Analyzing trace with hash -848437701, now seen corresponding path program 1 times [2022-11-16 12:41:35,356 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:41:35,356 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [790125812] [2022-11-16 12:41:35,357 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:41:35,357 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:41:35,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:41:35,554 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:41:35,555 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:41:35,555 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [790125812] [2022-11-16 12:41:35,555 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [790125812] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:41:35,555 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:41:35,556 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:41:35,556 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [977991156] [2022-11-16 12:41:35,558 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:41:35,559 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:41:35,559 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:41:35,559 INFO L85 PathProgramCache]: Analyzing trace with hash 124914803, now seen corresponding path program 1 times [2022-11-16 12:41:35,559 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:41:35,560 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [768476102] [2022-11-16 12:41:35,560 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:41:35,560 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:41:35,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:41:35,716 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:41:35,716 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:41:35,716 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [768476102] [2022-11-16 12:41:35,718 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [768476102] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:41:35,719 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:41:35,719 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 12:41:35,719 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1992447362] [2022-11-16 12:41:35,719 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:41:35,720 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:41:35,720 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:41:35,720 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 12:41:35,721 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 12:41:35,721 INFO L87 Difference]: Start difference. First operand 63850 states and 115702 transitions. cyclomatic complexity: 51854 Second operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 6 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:41:37,484 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:41:37,485 INFO L93 Difference]: Finished difference Result 178522 states and 325857 transitions. [2022-11-16 12:41:37,485 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 178522 states and 325857 transitions. [2022-11-16 12:41:38,493 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 74406 [2022-11-16 12:41:39,326 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 178522 states to 178522 states and 325857 transitions. [2022-11-16 12:41:39,326 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 178522 [2022-11-16 12:41:39,413 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 178522 [2022-11-16 12:41:39,414 INFO L73 IsDeterministic]: Start isDeterministic. Operand 178522 states and 325857 transitions. [2022-11-16 12:41:39,484 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:41:39,484 INFO L218 hiAutomatonCegarLoop]: Abstraction has 178522 states and 325857 transitions. [2022-11-16 12:41:39,559 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 178522 states and 325857 transitions. [2022-11-16 12:41:40,714 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 178522 to 62803. [2022-11-16 12:41:40,762 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62803 states, 62803 states have (on average 1.814594844195341) internal successors, (113962), 62802 states have internal predecessors, (113962), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:41:40,903 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62803 states to 62803 states and 113962 transitions. [2022-11-16 12:41:40,903 INFO L240 hiAutomatonCegarLoop]: Abstraction has 62803 states and 113962 transitions. [2022-11-16 12:41:40,903 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-16 12:41:40,904 INFO L428 stractBuchiCegarLoop]: Abstraction has 62803 states and 113962 transitions. [2022-11-16 12:41:40,904 INFO L335 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2022-11-16 12:41:40,904 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 62803 states and 113962 transitions. [2022-11-16 12:41:41,109 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 15729 [2022-11-16 12:41:41,109 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:41:41,109 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:41:41,114 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:41:41,114 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:41:41,115 INFO L748 eck$LassoCheckResult]: Stem: 773920#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~maximumWeight~0 := 100;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~weight~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 771596#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 771597#L3402 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 769884#L3395 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1; 767599#L3410 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 767600#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 767665#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 767725#L2217 assume { :end_inline_initFloors } true; 774408#L670 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 767781#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 767782#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 769557#L2495 assume 0 == initPersonOnFloor_~floor#1; 771241#L2496 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 764839#L2603-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 773423#L2287 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 767578#L2299-2 assume { :end_inline_callOnFloor } true; 770071#L2639 assume { :end_inline_initPersonOnFloor } true; 770072#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 772941#L854 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 772936#L906 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 765971#L2842 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 765972#L2904 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 767963#L2914 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 767964#L2925 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 768165#L2936 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 768167#L2947 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 764887#L2948 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 766005#L1535 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 766007#L854-1 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 771879#L871-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 767251#L875-10 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 767252#L892-10 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 774310#L1546 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 775629#L1685 assume !(0 != timeShift_~tmp___9~2#1); 769073#L1776 assume !(1 == ~doorState~0); 769074#L1776-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 769965#L1438 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 769065#L1459 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 772447#L1411 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 767991#L1058-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 767992#L1227-2 assume !(0 == ~currentFloorID~0); 770853#L1233-2 assume ~currentFloorID~0 > 0; 768741#L1234-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 768742#L2224-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 765961#L2251-26 stopRequestedInDirection__wrappee__weight_#t~ret38#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___9~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret38#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret38#1; 771609#L1238-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 767455#L1380-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 775385#L1429 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 775661#L1784 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 773805#L1473 assume !(1 == ~currentHeading~0); 773806#L1483 assume !(0 == ~currentFloorID~0); 772817#L1483-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 772818#L1489-1 assume { :end_inline_continueInDirection } true; 778789#L1793-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 778790#L2973 assume !(-1 == ~expectedDirection~0); 778034#L2985 assume !(1 == ~expectedDirection~0); 778033#L2986 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 778030#L1808 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 778031#L854-2 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 778028#L906-3 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 778029#L2842-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 774645#L2904-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 778027#L2914-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 778022#L2925-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 778023#L2936-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 778017#L2947-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 778018#L2948-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 778012#L1535-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 778014#L854-3 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 778005#L871-22 assume !(0 == buttonForFloorIsPressed_~floorID#1); 778007#L875-22 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 779223#L892-22 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 779222#L1546-1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 779220#L1685-2 assume !(0 != timeShift_~tmp___9~2#1); 779219#L1776-3 assume !(1 == ~doorState~0); 779218#L1776-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 779215#L1438-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 779212#L1459-2 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 779210#L1411-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 779211#L1058-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 779774#L1227-8 assume !(0 == ~currentFloorID~0); 779772#L1233-8 assume ~currentFloorID~0 > 0; 779771#L1234-8 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1); 771062#L1248-8 assume ~currentFloorID~0 > 0; 779765#L1250-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 769069#L1251-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 766339#L1380-8 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 779898#L1429-2 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 776142#L1784-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 776144#L1473-3 assume !(1 == ~currentHeading~0); 775664#L1483-9 assume !(0 == ~currentFloorID~0); 774054#L1483-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 776571#L1489-7 assume { :end_inline_continueInDirection } true; 786346#L1793-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 786344#L2973-1 assume !(-1 == ~expectedDirection~0); 786343#L2985-1 assume !(1 == ~expectedDirection~0); 786339#L2986-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 786337#L1808-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 786338#L854-4 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 786333#L906-6 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 786334#L2842-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 776533#L2904-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 786309#L2914-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 786200#L2925-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 786202#L2936-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 786071#L2947-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 786073#L2948-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 781174#L1535-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 781176#L854-5 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 787605#L871-34 assume !(0 == buttonForFloorIsPressed_~floorID#1); 787603#L875-34 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 787593#L892-34 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 787574#L1546-2 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 787571#L1685-4 assume !(0 != timeShift_~tmp___9~2#1); 787568#L1776-6 assume !(1 == ~doorState~0); 787566#L1776-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 787562#L1438-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 787554#L1459-4 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 787551#L1411-4 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 787552#L1058-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 795222#L1227-14 assume !(0 == ~currentFloorID~0); 792887#L1233-14 assume ~currentFloorID~0 > 0; 792886#L1234-14 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1); 792879#L1248-14 assume ~currentFloorID~0 > 0; 792526#L1250-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 792527#L1251-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 775957#L1380-14 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 792854#L1429-4 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 775840#L1784-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 775842#L1473-6 assume !(1 == ~currentHeading~0); 769984#L1483-18 assume !(0 == ~currentFloorID~0); 769985#L1483-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 766861#L1489-13 assume { :end_inline_continueInDirection } true; 764654#L1793-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 764655#L2973-2 assume !(-1 == ~expectedDirection~0); 800841#L2985-2 assume !(1 == ~expectedDirection~0); 771747#L2986-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 772506#L1808-2 assume { :end_inline_timeShift } true; 773464#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 773465#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 791069#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 788418#L2495-1 assume 0 == initPersonOnFloor_~floor#1; 787526#L2496-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 787500#L2603-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 787439#L2287-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 787435#L2299-5 assume { :end_inline_callOnFloor } true; 787393#L2639-1 assume { :end_inline_initPersonOnFloor } true; 786482#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 786481#L854-6 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 786480#L906-9 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 786479#L2842-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 783865#L2904-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 786476#L2914-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 786474#L2925-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 786472#L2936-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 786470#L2947-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 786469#L2948-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 786468#L1535-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 786226#L854-7 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 786227#L871-46 assume !(0 == buttonForFloorIsPressed_~floorID#1); 788424#L875-46 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 802298#L892-46 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 802248#L1546-3 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 802245#L1685-6 assume !(0 != timeShift_~tmp___9~2#1); 802242#L1776-9 assume !(1 == ~doorState~0); 802236#L1776-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 802210#L1438-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 802193#L1459-6 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 802188#L1411-6 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 802182#L1058-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 802162#L1227-20 assume !(0 == ~currentFloorID~0); 778845#L1233-20 assume ~currentFloorID~0 > 0; 778818#L1234-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 778819#L2224-209 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 810956#L2251-209 stopRequestedInDirection__wrappee__weight_#t~ret38#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___9~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret38#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret38#1; 776253#L1238-20 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 776245#L1380-20 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 776190#L1429-6 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 776191#L1784-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 766709#L1473-9 assume !(1 == ~currentHeading~0); 766710#L1483-27 assume !(0 == ~currentFloorID~0); 774369#L1483-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 774370#L1489-19 assume { :end_inline_continueInDirection } true; 814061#L1793-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 814059#L2973-3 assume !(-1 == ~expectedDirection~0); 814056#L2985-3 assume !(1 == ~expectedDirection~0); 814052#L2986-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 814051#L1808-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 814049#L198-2 [2022-11-16 12:41:41,116 INFO L750 eck$LassoCheckResult]: Loop: 814049#L198-2 assume !false; 814048#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 814047#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 814046#L701 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 814045#L206 assume 1 != cleanup_~tmp___0~0#1; 814044#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 814035#L2224-244 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 814021#L2251-244 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 814015#L962 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 814003#L1026 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 814002#L1039 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 814001#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 801038#L854-8 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 801039#L906-12 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 801033#L2842-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 800848#L2904-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 801028#L2914-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 801029#L2925-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 801024#L2936-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 801025#L2947-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 801020#L2948-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 801021#L1535-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 813982#L854-9 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 813998#L871-58 assume !(0 == buttonForFloorIsPressed_~floorID#1); 813993#L875-58 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 813970#L892-58 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 813968#L1546-4 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 813965#L1685-8 assume !(0 != timeShift_~tmp___9~2#1); 813963#L1776-12 assume 1 == ~doorState~0;~doorState~0 := 0; 813961#L1776-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 813954#L1438-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 813949#L1459-8 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 813945#L1411-8 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 813946#L1058-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 825801#L1227-26 assume !(0 == ~currentFloorID~0); 800967#L1233-26 assume ~currentFloorID~0 > 0; 771758#L1234-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 771759#L2224-275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 809677#L2251-275 stopRequestedInDirection__wrappee__weight_#t~ret38#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___9~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret38#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret38#1; 809678#L1238-26 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 809513#L1380-26 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 809511#L1429-8 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 800972#L1784-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 800974#L1473-12 assume !(1 == ~currentHeading~0); 815795#L1483-36 assume !(0 == ~currentFloorID~0); 814964#L1483-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 814960#L1489-25 assume { :end_inline_continueInDirection } true; 814958#L1793-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 814957#L2973-4 assume !(-1 == ~expectedDirection~0); 814956#L2985-4 assume !(1 == ~expectedDirection~0); 814057#L2986-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 814050#L1808-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 814049#L198-2 [2022-11-16 12:41:41,117 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:41:41,118 INFO L85 PathProgramCache]: Analyzing trace with hash -1287426862, now seen corresponding path program 1 times [2022-11-16 12:41:41,118 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:41:41,118 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [519610424] [2022-11-16 12:41:41,118 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:41:41,119 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:41:41,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:41:41,354 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:41:41,354 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:41:41,354 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [519610424] [2022-11-16 12:41:41,355 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [519610424] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:41:41,355 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:41:41,355 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:41:41,355 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2014144327] [2022-11-16 12:41:41,355 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:41:41,356 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:41:41,356 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:41:41,357 INFO L85 PathProgramCache]: Analyzing trace with hash -74127408, now seen corresponding path program 1 times [2022-11-16 12:41:41,357 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:41:41,357 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1729809210] [2022-11-16 12:41:41,357 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:41:41,358 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:41:41,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:41:41,530 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:41:41,530 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:41:41,531 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1729809210] [2022-11-16 12:41:41,531 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1729809210] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:41:41,531 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:41:41,531 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-16 12:41:41,532 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1632602374] [2022-11-16 12:41:41,532 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:41:41,533 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:41:41,534 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:41:41,534 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-11-16 12:41:41,535 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-11-16 12:41:41,535 INFO L87 Difference]: Start difference. First operand 62803 states and 113962 transitions. cyclomatic complexity: 51162 Second operand has 8 states, 8 states have (on average 6.5) internal successors, (52), 8 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:41:53,477 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:41:53,477 INFO L93 Difference]: Finished difference Result 168115 states and 305955 transitions. [2022-11-16 12:41:53,477 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 168115 states and 305955 transitions. [2022-11-16 12:41:54,091 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 43987 [2022-11-16 12:41:55,114 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 168115 states to 168115 states and 305955 transitions. [2022-11-16 12:41:55,114 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 168115 [2022-11-16 12:41:55,250 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 168115 [2022-11-16 12:41:55,250 INFO L73 IsDeterministic]: Start isDeterministic. Operand 168115 states and 305955 transitions. [2022-11-16 12:41:55,365 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:41:55,365 INFO L218 hiAutomatonCegarLoop]: Abstraction has 168115 states and 305955 transitions. [2022-11-16 12:41:55,466 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 168115 states and 305955 transitions. [2022-11-16 12:41:57,006 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 168115 to 80859. [2022-11-16 12:41:57,064 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 80859 states, 80859 states have (on average 1.821998788013703) internal successors, (147325), 80858 states have internal predecessors, (147325), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:41:57,241 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80859 states to 80859 states and 147325 transitions. [2022-11-16 12:41:57,241 INFO L240 hiAutomatonCegarLoop]: Abstraction has 80859 states and 147325 transitions. [2022-11-16 12:41:57,241 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-16 12:41:57,242 INFO L428 stractBuchiCegarLoop]: Abstraction has 80859 states and 147325 transitions. [2022-11-16 12:41:57,242 INFO L335 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2022-11-16 12:41:57,242 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 80859 states and 147325 transitions. [2022-11-16 12:41:57,440 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 20394 [2022-11-16 12:41:57,440 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:41:57,440 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:41:57,443 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:41:57,444 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:41:57,444 INFO L748 eck$LassoCheckResult]: Stem: 1004390#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~doorState~0 := 1;~maximumWeight~0 := 100;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~weight~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~expectedDirection~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 1002322#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1002323#L3402 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1000727#L3395 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~27#1;havoc valid_product_~retValue_acc~27#1;valid_product_~retValue_acc~27#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~27#1; 998537#L3410 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 998538#L395 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 998593#L368 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 998649#L2217 assume { :end_inline_initFloors } true; 1004765#L670 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 998701#L454 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 998702#L479 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1000421#L2495 assume 0 == initPersonOnFloor_~floor#1; 1002005#L2496 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 995802#L2603-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1003970#L2287 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 998517#L2299-2 assume { :end_inline_callOnFloor } true; 1000906#L2639 assume { :end_inline_initPersonOnFloor } true; 1000907#L113 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1003567#L854 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 1003563#L906 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 996930#L2842 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 996931#L2904 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 998879#L2914 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 998880#L2925 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 999078#L2936 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 999080#L2947 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 995851#L2948 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 996964#L1535 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 996966#L854-1 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 1002596#L871-10 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1004514#L875-10 assume !(1 == buttonForFloorIsPressed_~floorID#1); 1005533#L879-10 assume 2 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_2~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 1005531#L892-10 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1004964#L1546 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1004965#L1685 assume !(0 != timeShift_~tmp___9~2#1); 999955#L1776 assume !(1 == ~doorState~0); 999956#L1776-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 1005526#L1438 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 1005525#L1459 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 1003121#L1411 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 998906#L1058-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 998907#L1227-2 assume !(0 == ~currentFloorID~0); 1001631#L1233-2 assume ~currentFloorID~0 > 0; 999642#L1234-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 999643#L2224-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 996920#L2251-26 stopRequestedInDirection__wrappee__weight_#t~ret38#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___9~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret38#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret38#1; 1002334#L1238-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 1002335#L1380-2 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1005515#L1429 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 1005516#L1784 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1004286#L1473 assume !(1 == ~currentHeading~0); 1004287#L1483 assume !(0 == ~currentFloorID~0); 1003454#L1483-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1003455#L1489-1 assume { :end_inline_continueInDirection } true; 1007020#L1793-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 1007021#L2973 assume !(-1 == ~expectedDirection~0); 1007014#L2985 assume !(1 == ~expectedDirection~0); 1007012#L2986 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1007009#L1808 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1007010#L854-2 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 1007007#L906-3 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 1007008#L2842-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1004911#L2904-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 1007004#L871-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 999839#L892-17 __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 999840#L2908-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 1028531#L2948-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 1028529#L1535-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1028528#L854-3 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 1028527#L871-22 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1028525#L875-22 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 1028500#L892-22 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1028497#L1546-1 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1028498#L1685-2 assume !(0 != timeShift_~tmp___9~2#1); 1028433#L1776-3 assume !(1 == ~doorState~0); 1028431#L1776-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 1028427#L1438-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 1028423#L1459-2 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 1028418#L1411-2 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1028395#L1058-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1028385#L1227-8 assume !(0 == ~currentFloorID~0); 1028372#L1233-8 assume ~currentFloorID~0 > 0; 1028367#L1234-8 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1); 1028368#L1248-8 assume ~currentFloorID~0 > 0; 1000968#L1250-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 999951#L1251-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 997297#L1380-8 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1075605#L1429-2 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 1075603#L1784-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1002007#L1473-3 assume !(1 == ~currentHeading~0); 1002008#L1483-9 assume !(0 == ~currentFloorID~0); 1003377#L1483-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1002562#L1489-7 assume { :end_inline_continueInDirection } true; 1002020#L1793-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 1070791#L2973-1 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 1027038#L906-4 __utac_acc__Specification3_spec__2_#t~ret114#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~12#1 := __utac_acc__Specification3_spec__2_#t~ret114#1;havoc __utac_acc__Specification3_spec__2_#t~ret114#1; 1070744#L2977-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12#1); 1027028#L2985-1 assume !(1 == ~expectedDirection~0); 1027023#L2986-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1027024#L1808-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1057037#L854-4 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 1057027#L906-6 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 1057024#L2842-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1013460#L2904-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 1057003#L871-29 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 1056999#L892-29 __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 1056997#L2908-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 1056998#L2948-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 1068870#L1535-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1068869#L854-5 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 1068868#L871-34 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1068867#L875-34 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 1004115#L892-34 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1004130#L1546-2 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1071606#L1685-4 assume !(0 != timeShift_~tmp___9~2#1); 1075922#L1776-6 assume !(1 == ~doorState~0); 1075921#L1776-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 1075918#L1438-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 1075915#L1459-4 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 1075914#L1411-4 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1003332#L1058-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1003333#L1227-14 assume !(0 == ~currentFloorID~0); 1004719#L1233-14 assume ~currentFloorID~0 > 0; 1002910#L1234-14 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1); 1000967#L1248-14 assume ~currentFloorID~0 > 0; 1004186#L1250-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1; 999765#L1251-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 999294#L1380-14 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1075963#L1429-4 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 1075962#L1784-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1002889#L1473-6 assume !(1 == ~currentHeading~0); 1002890#L1483-18 assume !(0 == ~currentFloorID~0); 1004879#L1483-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 997813#L1489-13 assume { :end_inline_continueInDirection } true; 997814#L1793-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 1070790#L2973-2 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 1068487#L906-7 __utac_acc__Specification3_spec__2_#t~ret114#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~12#1 := __utac_acc__Specification3_spec__2_#t~ret114#1;havoc __utac_acc__Specification3_spec__2_#t~ret114#1; 1068504#L2977-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12#1); 1068483#L2985-2 assume !(1 == ~expectedDirection~0); 1068481#L2986-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1068480#L1808-2 assume { :end_inline_timeShift } true; 1068479#L181 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret5#1, bobCall_~tmp~0#1;havoc bobCall_~tmp~0#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1068478#L454-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1068472#L479-1 bobCall_#t~ret5#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~0#1 := bobCall_#t~ret5#1;havoc bobCall_#t~ret5#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~0#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1068471#L2495-1 assume 0 == initPersonOnFloor_~floor#1; 1068462#L2496-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1063735#L2603-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1063684#L2287-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1063666#L2299-5 assume { :end_inline_callOnFloor } true; 1062841#L2639-1 assume { :end_inline_initPersonOnFloor } true; 1054211#L113-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1054209#L854-6 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 1054208#L906-9 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 1053259#L2842-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1011843#L2904-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 1007062#L871-41 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 1004129#L892-41 __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 996817#L2908-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 996819#L2948-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 1065477#L1535-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1065476#L854-7 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 1065475#L871-46 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1065471#L875-46 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 1065468#L892-46 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1065459#L1546-3 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1065460#L1685-6 assume !(0 != timeShift_~tmp___9~2#1); 1076016#L1776-9 assume !(1 == ~doorState~0); 1076015#L1776-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 1076014#L1438-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 1076009#L1459-6 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 1076007#L1411-6 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1076008#L1058-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1076027#L1227-20 assume !(0 == ~currentFloorID~0); 1076026#L1233-20 assume ~currentFloorID~0 > 0; 998085#L1234-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 998086#L2224-209 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 996707#L2251-209 stopRequestedInDirection__wrappee__weight_#t~ret38#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___9~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret38#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret38#1; 1004798#L1238-20 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 996548#L1380-20 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1075530#L1429-6 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 1075529#L1784-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 997663#L1473-9 assume !(1 == ~currentHeading~0); 997664#L1483-27 assume !(0 == ~currentFloorID~0); 1001916#L1483-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 997422#L1489-19 assume { :end_inline_continueInDirection } true; 997423#L1793-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 997761#L2973-3 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 1003257#L906-10 __utac_acc__Specification3_spec__2_#t~ret114#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~12#1 := __utac_acc__Specification3_spec__2_#t~ret114#1;havoc __utac_acc__Specification3_spec__2_#t~ret114#1; 1003645#L2977-6 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12#1); 1071620#L2985-3 assume !(1 == ~expectedDirection~0); 1071617#L2986-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1071616#L1808-3 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1071614#L198-2 [2022-11-16 12:41:57,446 INFO L750 eck$LassoCheckResult]: Loop: 1071614#L198-2 assume !false; 1071607#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1071605#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~5#1;havoc isBlocked_~retValue_acc~5#1;isBlocked_~retValue_acc~5#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~5#1; 1065613#L701 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1065538#L206 assume 1 != cleanup_~tmp___0~0#1; 1065537#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~12#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~12#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~11#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~11#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 1065501#L2224-244 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 1065466#L2251-244 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 1065456#L962 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~11#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~11#1; 1063750#L1026 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~12#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~12#1; 1063665#L1039 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1037933#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_#t~ret69#1, timeShift_#t~ret70#1, timeShift_#t~ret71#1, timeShift_#t~ret72#1, timeShift_#t~ret73#1, timeShift_#t~ret74#1, timeShift_#t~ret75#1, timeShift_~tmp~21#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret102#1, __utac_acc__Specification3_spec__1_#t~ret103#1, __utac_acc__Specification3_spec__1_#t~ret104#1, __utac_acc__Specification3_spec__1_#t~ret105#1, __utac_acc__Specification3_spec__1_#t~ret106#1, __utac_acc__Specification3_spec__1_#t~ret107#1, __utac_acc__Specification3_spec__1_#t~ret108#1, __utac_acc__Specification3_spec__1_#t~ret109#1, __utac_acc__Specification3_spec__1_#t~ret110#1, __utac_acc__Specification3_spec__1_#t~ret111#1, __utac_acc__Specification3_spec__1_#t~ret112#1, __utac_acc__Specification3_spec__1_#t~ret113#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~23#1, __utac_acc__Specification3_spec__1_~tmp___0~11#1, __utac_acc__Specification3_spec__1_~tmp___1~8#1, __utac_acc__Specification3_spec__1_~tmp___2~6#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~23#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~8#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~6#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1037890#L854-8 __utac_acc__Specification3_spec__1_#t~ret102#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~23#1 := __utac_acc__Specification3_spec__1_#t~ret102#1;havoc __utac_acc__Specification3_spec__1_#t~ret102#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~23#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 1037883#L906-12 __utac_acc__Specification3_spec__1_#t~ret103#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret103#1;havoc __utac_acc__Specification3_spec__1_#t~ret103#1; 1037878#L2842-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 1008820#L2904-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 1007122#L871-53 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 1029830#L892-53 __utac_acc__Specification3_spec__1_#t~ret109#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret109#1;havoc __utac_acc__Specification3_spec__1_#t~ret109#1; 1029828#L2908-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 1029827#L2948-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1, stopRequestedAtCurrentFloor_#t~ret51#1, stopRequestedAtCurrentFloor_#t~ret52#1, stopRequestedAtCurrentFloor_~retValue_acc~17#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~7#1, stopRequestedAtCurrentFloor_~__cil_tmp4~1#1, stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~17#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1#1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0#1 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1#1 / 3); 1029825#L1535-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~6#1;havoc getCurrentFloorID_~retValue_acc~6#1;getCurrentFloorID_~retValue_acc~6#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~6#1; 1029824#L854-9 stopRequestedAtCurrentFloor_#t~ret50#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret50#1;havoc stopRequestedAtCurrentFloor_#t~ret50#1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := stopRequestedAtCurrentFloor_~tmp~19#1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~8#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~8#1; 1029823#L871-58 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1029822#L875-58 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~8#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~8#1; 1029744#L892-58 stopRequestedAtCurrentFloor_#t~ret51#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret51#1;havoc stopRequestedAtCurrentFloor_#t~ret51#1;stopRequestedAtCurrentFloor_~retValue_acc~17#1 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7#1 then 1 else 0);stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~17#1; 1029739#L1546-4 timeShift_#t~ret65#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1029740#L1685-8 assume !(0 != timeShift_~tmp___9~2#1); 1029733#L1776-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1029731#L1776-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret43#1, stopRequestedInDirection_#t~ret44#1, stopRequestedInDirection_#t~ret45#1, stopRequestedInDirection_#t~ret46#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~14#1, stopRequestedInDirection_~overload~0#1, stopRequestedInDirection_~buttonPressed~0#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~__cil_tmp8~0#1, stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~14#1;havoc stopRequestedInDirection_~overload~0#1;havoc stopRequestedInDirection_~buttonPressed~0#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;havoc stopRequestedInDirection_~__cil_tmp9~0#1;stopRequestedInDirection_~__cil_tmp8~0#1 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0#1 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0#1 / 3 else stopRequestedInDirection_~__cil_tmp8~0#1 / 3);stopRequestedInDirection_~overload~0#1 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0#1 then 1 else 0);assume { :begin_inline_isAnyLiftButtonPressed } true;havoc isAnyLiftButtonPressed_#res#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1;havoc isAnyLiftButtonPressed_~retValue_acc~15#1; 1029715#L1438-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15#1 := 1;isAnyLiftButtonPressed_#res#1 := isAnyLiftButtonPressed_~retValue_acc~15#1; 1029706#L1459-8 stopRequestedInDirection_#t~ret43#1 := isAnyLiftButtonPressed_#res#1;assume { :end_inline_isAnyLiftButtonPressed } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret43#1;havoc stopRequestedInDirection_#t~ret43#1;stopRequestedInDirection_~buttonPressed~0#1 := stopRequestedInDirection_~tmp~16#1; 1029703#L1411-8 assume !(0 != stopRequestedInDirection_~overload~0#1);assume { :begin_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection__wrappee__weight_#in~dir#1, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_#res#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret32#1, stopRequestedInDirection__wrappee__weight_#t~ret33#1, stopRequestedInDirection__wrappee__weight_#t~ret34#1, stopRequestedInDirection__wrappee__weight_#t~ret35#1, stopRequestedInDirection__wrappee__weight_#t~ret36#1, stopRequestedInDirection__wrappee__weight_#t~ret37#1, stopRequestedInDirection__wrappee__weight_#t~ret38#1, stopRequestedInDirection__wrappee__weight_#t~ret39#1, stopRequestedInDirection__wrappee__weight_#t~ret40#1, stopRequestedInDirection__wrappee__weight_#t~ret41#1, stopRequestedInDirection__wrappee__weight_#t~ret42#1, stopRequestedInDirection__wrappee__weight_~dir#1, stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1, stopRequestedInDirection__wrappee__weight_~tmp~15#1, stopRequestedInDirection__wrappee__weight_~tmp___0~5#1, stopRequestedInDirection__wrappee__weight_~tmp___1~4#1, stopRequestedInDirection__wrappee__weight_~tmp___2~2#1, stopRequestedInDirection__wrappee__weight_~tmp___3~1#1, stopRequestedInDirection__wrappee__weight_~tmp___4~0#1, stopRequestedInDirection__wrappee__weight_~tmp___5~0#1, stopRequestedInDirection__wrappee__weight_~tmp___6~0#1, stopRequestedInDirection__wrappee__weight_~tmp___7~0#1, stopRequestedInDirection__wrappee__weight_~tmp___8~0#1, stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~dir#1 := stopRequestedInDirection__wrappee__weight_#in~dir#1;stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1;havoc stopRequestedInDirection__wrappee__weight_~tmp~15#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0#1; 1029704#L1058-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir#1); 1029727#L1227-26 assume !(0 == ~currentFloorID~0); 1029685#L1233-26 assume ~currentFloorID~0 > 0; 1029677#L1234-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~20#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~20#1; 1029678#L2224-275 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~20#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~20#1; 1029684#L2251-275 stopRequestedInDirection__wrappee__weight_#t~ret38#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__weight_~tmp___9~0#1 := stopRequestedInDirection__wrappee__weight_#t~ret38#1;havoc stopRequestedInDirection__wrappee__weight_#t~ret38#1; 1029674#L1238-26 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0#1;stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1 := 1;stopRequestedInDirection__wrappee__weight_#res#1 := stopRequestedInDirection__wrappee__weight_~retValue_acc~13#1; 1029675#L1380-26 stopRequestedInDirection_#t~ret46#1 := stopRequestedInDirection__wrappee__weight_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__weight } true;stopRequestedInDirection_~retValue_acc~14#1 := stopRequestedInDirection_#t~ret46#1;havoc stopRequestedInDirection_#t~ret46#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~14#1; 1075206#L1429-8 timeShift_#t~ret72#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret72#1;havoc timeShift_#t~ret72#1; 1075205#L1784-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret47#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 995693#L1473-12 assume !(1 == ~currentHeading~0); 995694#L1483-36 assume !(0 == ~currentFloorID~0); 996257#L1483-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 996815#L1489-25 assume { :end_inline_continueInDirection } true; 996816#L1793-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret114#1, __utac_acc__Specification3_spec__2_#t~ret115#1, __utac_acc__Specification3_spec__2_~tmp~24#1, __utac_acc__Specification3_spec__2_~tmp___0~12#1;havoc __utac_acc__Specification3_spec__2_~tmp~24#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~12#1; 1003142#L2973-4 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~9#1;havoc getCurrentHeading_~retValue_acc~9#1;getCurrentHeading_~retValue_acc~9#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~9#1; 1003143#L906-13 __utac_acc__Specification3_spec__2_#t~ret114#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~12#1 := __utac_acc__Specification3_spec__2_#t~ret114#1;havoc __utac_acc__Specification3_spec__2_#t~ret114#1; 1072916#L2977-8 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12#1); 1071622#L2985-4 assume !(1 == ~expectedDirection~0); 1071618#L2986-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1071615#L1808-4 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1071614#L198-2 [2022-11-16 12:41:57,447 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:41:57,447 INFO L85 PathProgramCache]: Analyzing trace with hash 475252452, now seen corresponding path program 1 times [2022-11-16 12:41:57,447 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:41:57,447 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [845402979] [2022-11-16 12:41:57,448 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:41:57,448 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:41:57,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:41:57,626 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:41:57,626 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:41:57,626 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [845402979] [2022-11-16 12:41:57,627 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [845402979] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:41:57,627 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:41:57,627 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:41:57,627 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2042369187] [2022-11-16 12:41:57,627 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:41:57,628 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:41:57,628 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:41:57,628 INFO L85 PathProgramCache]: Analyzing trace with hash 883103362, now seen corresponding path program 1 times [2022-11-16 12:41:57,629 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:41:57,629 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1019724145] [2022-11-16 12:41:57,629 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:41:57,629 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:41:57,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:41:57,832 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:41:57,832 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:41:57,832 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1019724145] [2022-11-16 12:41:57,832 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1019724145] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:41:57,832 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:41:57,833 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 12:41:57,833 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1181406240] [2022-11-16 12:41:57,833 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:41:57,833 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:41:57,834 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:41:57,834 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 12:41:57,835 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 12:41:57,836 INFO L87 Difference]: Start difference. First operand 80859 states and 147325 transitions. cyclomatic complexity: 66469 Second operand has 5 states, 5 states have (on average 10.6) internal successors, (53), 5 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:00,448 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:00,448 INFO L93 Difference]: Finished difference Result 277717 states and 512445 transitions. [2022-11-16 12:42:00,448 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 277717 states and 512445 transitions.